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ABSTRACT 


CAPS  (Computer-Aided  Prototyping  System)  is  an  integrated  set  of  software  tools 
that  generate  source  programs  directly  from  real-time  requirements.  CAPS  users  can 
specify  the  requirements  of  prototypes  as  augmented  computational  graphs  using  the 
graphics/text  editor.  The  problem  with  the  current  version  of  CAPS  is  that  most  of  the 
feasibility  checks  for  the  prototypes  are  currently  enforced  by  the  translator  and  the 
scheduler.  Such  an  approach  requires  the  engineers  to  go  through  the  “edit,  save  file,  then 
translate  and  schedule”  cycle  in  order  to  find  out  if  the  control  and  timing  constraints  can 
be  satisfied. 

The  protot5q)ing  process  can  be  made  much  more  efficient  and  user-friendly  if  these 
checks  are  enforced  by  the  CAPS  PSDL  (Prototype  System  Description  Language)  SDE 
(syntax-directed  editor),  where  users  can  detect  and  receive  warnings  as  they  enter  the 
design.  This  thesis  focuses  on  the  properties  that  must  exist  between  processes  and  their 
inter-connected  data  flows  in  order  for  a  prototype  to  be  correct.  It  further  modifies  the 
PSDL  SDE  so  that  parts  of  the  prototype  are  captured,  combined,  and  manipulated  in  a  way 
that  provides  the  semantic  information  needed  to  determine  if  these  properties  have  been 
violated. 

The  new  editor  has  been  applied  to  several  prototype  examples.  The  results  showed 
that,  by  catching  errors  during  the  editing  phase,  the  user  saves  time,  is  better  able  to  stay 
focused  on  the  design,  and  is  subsequently  more  productive. 


V 


TABLE  OF  CONTENTS 


I.  INTRODUCTION . 1 

A.  SOFTWARE  AFFLICTION . 1 

B.  PROTOTYPING . 3 

n.  CAPS . 7 

A.  PSDL . 8 

1.  Operators . 9 

a.  Composite  or  Atomic . 9 

b.  Time-Critical  or  Non  Time-Critical . 10 

c.  Periodic  or  Sporadic . 10 

2.  Streams . 10 

3.  Timers . 12 

4.  Triggers . 12 

5.  Conditionals . 12 

a.  Conditional  Execution . 12 

b.  Conditional  Output . 12 

6.  Exceptions . 12 

B.  EDITORS . 13 

1.  PSDL  Editor . 13 

2.  Text  Editor . 13 

3.  Interface  Editor . 14 


vii 


4.  Requirements  Editor 


14 


5.  Change  Request  Editor . 14 

C.  EXECUTION  SUPPORT . 14 

1.  Translator . 14 

2.  Scheduler . 15 

3.  Compiler . 15 

D.  PROJECT  CONTROL . 15 

1.  Evolution  Control  System . 15 

2.  Merger . 16 

E.  SOFTWARE  BASE . 16 

m.  THE  SYNTHESIZER  GENERATOR . 17 

A.  BACKGROUND . 17 

B.  USES . 18 

C.  BUILDING  AN  EDITOR . 19 

1 .  Abstract  S  yntax  Rules . 22 

2.  Attribute  Rules . 25 

3.  Unparsing  Rules . 35 

4.  Transformation  Rules . 37 

5.  Concrete  Rules . 38 

IV.  SYNTAX-DIRECTED  EDITOR  (SDE) . 43 

A.  EXAMPLE  OF  SDE . 43 

1 .  Simple  Tutorial . 43 

2.  SDE  Menu  Functions . 62 

B.  NEW  FUNCTIONALITY . 65 


1.  Scheduling  Constraints . 65 

a.  General . 65 

b.  Data  Triggering  Semantic  Checking . 67 

c.  Timing  Constraint  Semantic  Checking . 69 

C.  MODIFICATIONS . 73 

1.  Data  Triggering  Constraints . 73 

2.  Abstract  Syntax  Rule . 74 

3.  Attribute  Rules . 77 

4.  Unparsing  Rules . 83 

5.  Transformation  Rules . 84 

6.  Concrete  Rules . 84 

D.  TESTING . 84 

V.  FUTURE  RESEARCH  AND  DEVELOPMENT . 89 

LIST  OF  REFERENCES . . 

APPENDIX  A  -  PSDL  GRAMMAR . 93 

APPENDIX  B  -  ABSTRACT  SYNTAX  RULES . 95 

APPENDIX  C  -  ATTRIBUTE  RULES . 103 

APPENDIX  D  -  AUXILIARY  FUNCTIONS . 119 

APPENDIX  E  -  UNPARSING  RULES . 241 

APPENDIX  F  -  TRANSFORMATION  RULES . 249 

APPENDIX  G  -  CONCRETE  SYNTAX  RULES . 255 

INITIAL  DISTRIBUTION  LIST . 269 


ix 


X 


ACKNOWLEDGEMENT 

To  Dr.  Shing,  I  would  like  to  express  my  deepest  gratitude  for  being  so  patient  while 
explaining  the  required  concepts  over  and  over  again.  Yoiu  support,  knowledge,  and  ability  to 
grasp  new  things  never  ceases  to  amaze  me. 

To  my  children,  Melessa  and  Kim,  who  have  been  known  to  call  me  “geek”  a  time  or  two  in 
jest,  I  hope  that  some  day  you  will  be  in  my  shoes.  You  have  given  a  lot  and  given  up  a  lot  for  me 
and  I  sincerely  appreciate  that.  I  know  it  is  tough,  especially  for  teenagers. 

To  my  beloved  wife,  Joyce,  who  has  always  been  there  for  me,  I  owe  you  everything.  You 
mean  everything  to  me  and  are  the  reason  I  have  achieved  as  much  as  I  have.  You’ve  given  up  so 
much  in  the  past  and  expected  so  little  in  return.  Words  can’t  describe  my  appreciation. 

Finally,  thank  you  God  for  making  this  all  possible. 


XI 


I.  INTRODUCTION 


Cheaper,  faster,  more  reliable  hardware  has  helped  to  make  software  the  dominant  factor 
in  today's  computing  needs.  While  sky-  rocketing  demand  for  software  continues,  the 
requirements  get  much  more  demanding;  especially  so  for  real-time  systems  with  their  timing 
restrictions.  Scheduling  feasibility  is  one  of  the  most  important  and  demanding  aspects  of 
ensuring  that  the  requirements  of  a  real-time  system  are  met  because  success  means  not  only 
being  correct,  but  also  on  time.  Correctness  refers  to  the  precision  and  accuracy  which  must  be 
adhered  to.  Being  on  time  refers  to  the  response  time  required  of  individual  operations.  CAPS 
(Computer-Aided  Prototyping  System)  is  an  ongoing  software  engineering  project  at  the  Naval 
Postgraduate  School  that  is  targeted  primarily  at  real-time  systems.  This  thesis  focuses  on  some 
of  the  issues  related  to  whether  or  not  the  design  of  a  real-time  prototype  is  feasible  and 
addresses  checking  some  of  these  feasibility  constraints  earlier  in  the  prototype  development 
cycle.  It  modifies  the  Syntax-Directed  Editor  (SDE),  which  is  one  of  the  tools  within  CAPS,  so 
that  errors  can  be  caught  while  still  in  the  design  phase,  thereby  saving  the  developer  valuable 
time,  enabling  more  accuracy  in  the  design,  and  subsequently  contributing  toward  higher 
productivity. 

This  chapter  describes  the  current  state  of  software  development  along  with  a  partial 
justification  for  the  need  of  supporting  tools  and  prototyping.  Chapter  n  gives  a  better 
description  of  CAPS,  the  tools  it  encompasses,  and  the  steps  required  to  create  a  prototype. 
Chapter  El  discusses  the  tool  that  is  used  to  generate  the  SDE,  the  Synthesizer  Generator.  It 
summarizes  the  required  specifications  to  creating  an  SDE.  Chapter  IV  covers  creating  a  short 
example  prototype,  some  of  the  constraints  that  must  hold  for  a  real-time  prototype  to  be 
schedulable,  detailed  changes  that  were  required  of  the  SDE  to  implement  those  constraints,  and 
an  example  with  the  new  editor.  Chapter  V  summarizes  with  a  conclusion  and  possible  future 
enhancements. 

A.  SOFTWARE  AFFLICTION 

Most  people  who  have  had  even  a  small  amount  of  interaction  with  the  development  of 
software  have  probably  heard  of  the  term  “software  crisis”.  Many  will  immediately  begin  to 
think  of  various  problems  that  exist  in  the  field  which  contribute  to  this  ongoing  situation.  A 
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better  term  for  this  problem  is  “chronic  affliction”  [Ref.  1].  The  word  “crisis”  tends  to  point  to  a 
single  point  in  time  where  something  dramatic  happens,  where  “chronic”  means  recurring  and 
“affliction”  means  anything  causing  pain  or  stress. 

There  are  many  problems  in  the  field  of  software  engineering  and  most  of  them  are 
recurring  and  sometimes  very  painful.  Probably  the  biggest  problem  facing  software 
development  today  is  the  insatiable  appetite  for  software  that  our  world  has  amassed;  an  appetite 
that  is  constantly  growing.  The  backlog  of  demanded  systems  continues  to  grow  in  numbers 
while  the  systems  themselves  are  becoming  much  more  complex. 

Real-time  systems  are  taking  a  bigger  piece  of  this  pie  and  among  the  most  difficult  to 
design  right  because  of  their  restrictions  on  time.  Many  are  critical  in  that  failure  can  lead  to 
great  costs.  History  is  already  full  of  incidents  caused  by  software  failures  such  as  the  Bank  of 
New  York  paying  $5  million  because  of  a  software  problem  [Ref.  2]  and  the  Patriot  missile  that 
missed  a  Scud  missile  because  of  a  timing  error  and  subsequently  ended  up  in  28  Americans 
killed  [Ref.  3].  Quality  and  user  friendliness  is  expected  in  degrees  rarely  achieved  to  date.  All 
this  while  many  of  the  current  projects  are  over  budget,  past  due,  and  not  meeting  user 
expectations.  Some  projects  are  dropped  after  extensive  amounts  of  resources  have  been 
invested.  In  fact,  as  many  as  25%  of  the  projects  in  large  MIS  organizations  are  never  completed 
[Ref.  4].  All  too  often,  cost  estimates  are  only  guesses  because  true  requirements  are  simply  not 
known.  The  bottom  line  is  that  the  software  engineering  community  must  increase  productivity 
dramatically  to  catch  up,  let  alone  keep  up. 

Probably  one  of  the  single  most  critical  areas  in  which  software  engineers  must  get  better 
at  is  capturing  requirements.  Most  of  the  time,  software  products  don't  satisfy  what  the  user 
really  intended.  It  may  meet  the  requirements  specified  by  the  user,  but  if  it  doesn't  meet  the 
users  needs,  its  a  bust.  This  is  the  major  cause  of  unsatisfied  customers. 

Software  engineers  must  get  faster  at  putting  out  finished  products.  Too  many  times, 
developers  fall  behind  and  this  is  one  of  the  biggest  factors  in  cost  over  runs.  One  well 
documented  fact  is  that  errors  get  much  more  expensive  in  terms  of  time  and  money  when 
discovered  later  in  the  development  cycle.  Making  matters  worse,  requirements  errors  are  not 
likely  to  be  found  until  implementation.  So  then,  it  only  stands  to  reason  that  the  most  expensive 
errors  are  the  ones  concerning  missed,  incorrectly,  or  inconsistently  defined  software 
requirements. 
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One  of  the  best  ways  of  ensuring  that  true  requirements  are  captured,  thereby  enabling 
the  developer  to  give  more  accurate  time  and  cost  estimates  and  at  the  same  time  maintain  a 
much  higher  probability  that  the  product  will  be  good  (as  define  by  the  user),  on  time,  and  on 
budget,  is  with  a  technique  called  prototyping. 

B.  PROTOTYPING 

Prototyping  is  an  excellent  tool  for  determining  exactly  what  is  needed  by  the  system  to 
be  developed.  Its  purpose  is  “to  help  customers  understand  and  criticize  proposed  systems  and  to 
explore  the  new  possibilities  that  computer  solutions  can  bring  to  their  problems  in  a  timely  and 
cost  effective  manner”  [Ref.  5].  It  is  much  like  the  architect  who  gets  some  guidance  from  the 
client,  goes  away  to  draft  up  preliminary  designs,  and  then  comes  back  to  review  what  has  been 
done.  The  architect  knows  that  it  may  be  all  wrong;  better  to  find  out  earlier  when  backtracking 
is  still  reasonably  cheap  than  later  when  it  is  extremely  expensive.  Once  the  designer  better 
understands  what  the  requirements  are,  more  meaningful  estimates  can  be  determined  along 
with  better  cosi/benefit  driven  feasibility  studies. 

The  best  situation  for  prototyping  is  when  there  is  uncertainty  about  what  is  required. 
This  could  be  uncertainty  as  to  what  exactly  the  customer  desires,  uncertainty  about  how  to 
make  things  happen,  or  both.  In  the  former  case,  a  client  may  not  know  exactly  what  it  is  they 
want,  certainly  making  it  difficult  for  the  developer.  They  may  know  what  is  needed  but  can't 
describe  it.  Many  times  the  client  speaks  in  a  whole  different  vocabulary  because  of  her 
expertise.  They  may  actually  or  mistakenly  have  described  exactly  what  is  needed  and  end  up 
with  a  product  that  is  totally  unusable.  The  English  language  is  very  ambiguous  at  best,  leaving 
lots  of  room  for  error. 

The  second  scenario  where  a  software  designer  is  unsure  how  to  make  things  happen  can 
be  a  very  difficult  problem.  The  designer  may  not  be  sure  of  how  to  deliver  what  is  wanted  in 
terms  of  functionality  or  performance.  Understand  data  and  control  flow,  functional  processing, 
or  general  understanding  of  the  behavior  of  the  system  can  be  greatly  enhanced  through 
prototyping.  This  situation  exists  when  venturing  into  unfamiliar  terrain  and  is  almost  always 
the  case  when  dealing  with  real-time  systems.  The  timing  constraints  imposed  can  be 
enormously  complex.  The  client  normally  can't  describe  them  while  the  analyst/designer  has  a 
tough  time  trying  to  determine  them  [Ref.  3].  Sometimes  whole  designs  must  be  redone  in  order 
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for  it  to  be  feasible  in  terms  of  scheduling.  Many  times  it  is  hard  to  determine  if  requirements 
have  been  met,  further  justifying  the  use  of  prototypes  for  validation  purposes. 

While  prototyping  can  be  done  merely  to  gather  requirements  (it  is  meant  to  be  thrown 
away  after  requirements  gathering  is  done),  the  focus  is  in  terms  of  a  development  paradigm. 

That  is  the  concept  of  prototyping  in  a  evolutionary  approach  where  the  system  goes  through  a 
continuous  cycle  of  modification/demonstration/evaluation  until  it  is  right.  An  iterative  approach 
that  rapidly  adjusts  the  behavior  of  the  prototype  based  on  feedback  from  the  customer  and 
designer.  This  allows  incremental  development  vice  a  big  bang  approach.  Most  who  have 
worked  on  a  complex  project  will  agree  that  it  is  easier  to  get  it  right  by  quickly  and  correctly 
doing  a  little  at  a  time  than  by  trying  to  do  everything  at  once.  The  big  bang  approach  gets  even 
more  unwieldy  when  the  size  dictates  multiple  designers.  With  each  iteration,  the  customer  and 
designer  come  to  a  more  common  understanding  of  what  the  customer  really  needs,  regardless 
of  preconceived  notions  by  either  party.  CAPS  endorses  this  evolutionary  approach  with 
software  tools  that  support  the  designer  in  the  task  of  building  and  executing  prototypes. 

One  aspect  of  this  process  that  makes  it  better  than  more  traditional  methods  such  as  the 
waterfall  method  is  it  does  not  expect  to  be  able  to  freeze  the  requirements.  Realistically, 
requirements  do  not  stabilize  until  the  user  gets  some  exposure  to  the  system  (especially  with 
real-time  systems).  With  most  traditional  methods,  this  means  not  having  stable  requirements 
until  after  implementation,  thereby  necessitating  significant  change  during  its  maintenance 
phase.  Changes  that  would  not  have  been  required  had  the  system  been  right  in  the  first  place. 
With  a  prototyping  approach,  the  user  gets  adequate  exposure  to  the  prototype  to  determine  true 
requirements.  And  because  it  is  an  iterative  process,  and  because  the  prototype  is  easier  to 
modify  than  implemented  code,  the  user  will  eventually  be  able  to  fine-tune  tentative 
requirements  into  exactly  what  the  system  needs  are. 

This  process  results  in  higher  quality  implementation  because  fewer  initial  errors  get  by. 
That  in  turn,  lowers  maintenance  costs,  which  is  the  dominant  expense  in  larger  systems, 
because  fewer  implementation  errors  means  fewer  discovered  mistakes  to  correct  for  during 
maintenance  (many  maintenance  changes  are  really  errors),  not  to  mention  the  fights  over  whose 
fault  and  who  pays  (requirements  mistake  vs.implementation  error).  Also,  when  changes  need  to 
be  made,  the  prototype  (which  is  more  simple  than  the  production  code)  can  be  manipulated/ 
modified  rather  than  the  production  code  (which  is  more  complex).  Then  when  the  required 
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changes  (new  requirements)  are  certain,  the  new  implementation  can  occur.  Much  of  the 
implementation  may  consist  of  old  code  but  1)  it  is  a  new  clean  implementation  with  clear, 
documented  requirements  (didn't  do  patchwork  with  old  implementation)  and  2)  the  changes  are 
easier  to  achieve  as  the  designer  worked  with  a  higher  level  abstraction. 

Because  constraints  from  both  the  problem  domain  and  the  programming  domain 
together  drive  the  requirements  of  a  proposed  system,  both  the  user  with  his  knowledge  of  the 
problem  domain  and  the  designer  with  her  knowledge  of  the  program  domain  must  work 
together  extensively.  Prototyping  helps  create  a  common  ground  where  they  can  communicate 
effectively  by  demonstrating  the  behavior  of  the  proposed  system.  The  disagreements  that  arise 
quickly  uncover  areas  that  need  further  thought/clarification. 

Testing  gets  more  mileage  with  the  iterative  approach.  Most  organizations  do  the  bulk  of 
their  testing  towards  the  end  of  the  software  development  cycle.  This  means  that  when  funds 
and  time  allocated  for  the  development  of  the  system  are  at  the  end,  the  organization  is  testing  to 
see  if  the  product  answers  the  mail.  The  question  that  immediately  comes  to  mind  is,  “what  if  it 
doesn't?”.  The  answer  is  complex.  Fixes  can  be  minor  or  significant  depending  on  how  far  off 
the  mark  the  developer  is  and  how  much  money,  time,  and  patience  the  customer  has.  Most 
testing  authorities  will  state  that  because  testing  is  one  of  the  most  effective  tools  in  developing 
correct  software,  it  should  be  moved  further  up  in  the  software  development  cycle.  By 
introducing  a  prototyping  methodology  that  has  validation  and  verification  built  into  the  cycle, 
this  problem  can  be  avoided.  Then,  when  final  testing  is  done,  it  does  not  have  to  be  as 
significant  and  there  are  no  surprises.  This  further  means  that  the  first  implementation  will  more 
reflect  user  needs.  That,  in  tern,  means  that  less  modifications  must  be  made  later  in  the 
maintenance/evolution  of  the  system  thereby  saving  time  and  money  and  keeping  the  system 
more  stable  and  useful  longer. 

In  a  study  that  looked  at  thirty-nine  significant  cases,  it  was  determined  that  “rapid 
prototyping  is  indeed  appropriate  for  large  systems,  and  there  seems  to  be  more  successful  use 
of  evolutionary  prototyping  than  throwaway”,  and  further  that  “rapid  prototyping  has  had  a 
number  of  positive  effects  on  both  the  software  product  and  development  process  and  that  it  can 
be  used  successfully  in  a  variety  of  situations”  [Ref.  6]. 
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Figure  1  below,  which  was  borrowed  from  the  CAPS  Tutorial  [Ref.  7],  helps  to  show  the 
Prototyping  Process.  The  shaded  areas  depict  the  cycle  that  is  executed  in  order  to  get  the 
requirements  right  before  implementation. 


Initial  Goals 


Figure  1.  The  CAPS  Prototyping  Process. 
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II.  CAPS 


Prototyping  can  dramatically  increase  the  effectiveness  of  building  and  supporting 
software  systems.  “A  high  level  language,  a  systematic  prototyping  method,  and  an  integrated 
set  of  computer-aided  prototyping  tools  are  important  for  realizing  the  potential  benefits  of 
prototyping”  [Ref.  8].  The  language  is  PSDL  (Prototyping  System  Description  Language)  and 
the  integrated  set  of  computer-aided  prototyping  tools  is  CAPS  (Computer  Aided  Prototyping 
System).  Useful  for  any  type  of  application,  CAPS  is  primarily  developed  for  real-time  system 
prototypes  and  consists  of  software  engineering  tools  which  are  linked  together  by  a  common 
interface.  These  tools  assist  the  designer  in  constructing  and  executing  the  protot5^e  [Ref.  8]. 

Several  sources  make  reference  to  hard  real-time  systems  which  are  those  in  which 
deadlines  and  requirements  are  guaranteed  to  be  met  under  the  worse-case  situation.  While  some 
COTS  (commercial  off  the  shelf)  products  are  available  for  real-time  support,  only  CAPS 
generates  code  which  satisfy  the  constraints  of  a  hard  real-time  system  [Ref.  3].  The  CAPS 
development  environment  is  displayed  in  Figure  2  below. 
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A.  PSDL 


Most  of  the  tools  within  CAPS  operate  on  PSDL  which  is  a  prototyping  language 
designed  to  enable  a  high  level  description  of  the  system.  PSDL  is  the  means  by  which  these 
tools  communicate  thereby  assisting  them  in  demonstrating  the  behavior  of  the  prototype.  It  was 
designed  to  assist  requirements  analysis,  feasibility  studies,  and  in  designing  large  embedded 
systems.  Because  this  thesis  involves  modifications  to  the  SDE,  which  is  heavily  intertwined 
with  PSDL,  more  detail  will  be  spent  on  PSDL  and  the  PSDL  Editor  than  other  parts  of  CAPS. 

An  underlying  computational  model  was  chosen  to  make  inter-component 
communications  explicit  [Ref.  9].  It  is  formally  represented  as  an  augmented  hypergraph,  G, 
where  G=(V,E,T(v),C(v))  [Ref.  10] 
where: 

V  is  a  set  of  vertices  (vertices  represent  operators), 

E  is  a  set  of  edges  (edges  represent  data  streams), 

T(v)  is  the  set  of  timing  constraints  for  vertex  v,  and 
C(v)  is  the  set  of  control  constraints  for  vertex  v. 

One  of  the  major  strengths  of  CAPS  is  its  support  of  the  prototyping  methodology. 
Prototyping  loses  much  of  its  appeal  when  modifications  to  the  prototype  are  as  intensive  as 
modification  to  production  code.  Because  of  this,  PSDL  was  designed  to  help  make  the  required 
design  modifications,  common  to  the  iterative  approach,  as  painless  as  possible. 

Modularity,  absolutely  necessary  to  a  good  design,  is  supported  by  operators  that 
explicitly  communicate  via  data  streams.  A  design  is  represented  by  a  hierarchically  structured 
network  of  these  operators  and  data  streams  which  are  laid  out  as  dataflow  diagrams,  enhanced 
with  timing  and  control  constraints.  Dataflow  diagrams  convey  a  great  deal  of  information  about 
the  internal  structure  of  a  process  and  yet  are  simple  to  read.  Extending  this  diagramming 
technique  with  timing  and  control  information  made  the  technique  much  more  powerful  while 
maintaining  its  simplicity. 

PSDL  supports  reuse  by  capturing  attributes  that  describe  both  the  interface  and  the 
behavior  of  components.  The  interface  attributes  captured  include  generics,  inputs,  outputs, 
states,  exceptions,  and  timing  information,  while  the  behavior  attributes  are  keywords,  and 
formal  and  informal  descriptions.  These  attributes  can  be  used  to  retrieve  reusable  components 
and  organize  the  software  base. 
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Requirements  tracing  is  supported  in  PSDL  by  a  construct  that  links  the  requirements  to 
the  part  of  the  prototype  that  implements  it  [Ref.  8].  This  is  important  so  that  as  the  system 
evolves,  obsolete  or  changed  requirements  can  quickly  be  identified  in  the  implementation  and 
modified  as  necessary.  It  further  helps  ensure  that  the  system  and  its  documentation  stay  up  to 
date. 

PSDL  further  supports  the  requirements  of  a  real-time  system  design:  Control 
Constraints,  which  maintain  preconditions  on  the  firing  of  a  module,  filter  a  modules  output,  and/ 
or  control  timers,  and  Tuning  Constraints,  which  implicitly  determine  when  constrained 
operators  will  fire,  are  built  into  PSDL  [Ref.  8].  They  are  discussed  in  more  detail  below.  While 
PSDL  was  designed  with  a  small  set  of  constructs  to  make  it  very  powerful,  it  was  kept  as 
simple  as  possible. 

1.  Operators 

Operators  can  represent  a  function  or  state  machine.  The  act  of  firing  (executing) 
involves  reading  one  data  object  from  each  input  data  stream  and  writing  zero  or  one  output  to 
each  output  data  stream.  The  operator  represents  a  function  if  its  output  is  solely  dependent  on 
the  inputs  to  the  operator;  the  same  input  will  always  produce  the  same  ouqiut.  If,  on  the  other 
hand,  its  output  depends  on  both  inputs  and  values  stored  in  its  memory  (internal  state),  it  is  a 
state  machine.  Operators  can  affect  each  other  only  by  explicit  data  streams  and  can  be  further 
decomposed  as  design  decisions  and  principles  of  abstraction  dictate. 

a.  Composite  or  Atomic 

Operators  can  be  classified  as  composite  or  atomic.  A  composite  operator  is  one 
that  should  be  further  decomposed.  On  the  flip  side,  an  atomic  operator  is  one  that  should  be 
decomposed  no  further.  When  analyzing  an  operator,  the  first  question  is,  “Is  there  a  component 
in  the  software  base  that  will  do  this?”.  If  the  answer  is  yes,  the  newly  designated  atomic 
operator  is  implemented  with  that  component.  If,  on  the  other  hand,  the  answer  is  no,  the  next 
question  is,  “Does  it  make  sense  to  decompose  this  operator?”.  If  so,  it  is  dubbed  a  composite 
operator  and  is  decomposed.  This  will  result  in  multiple  operators  that  are  each,  in  turn  analyzed 
with  the  first  question  above.  Of  course,  if  further  decomposition  doesn’t  make  sense,  the 
operator  is  atomic  and  an  implementation  must  be  created. 

As  with  all  data  flow  diagrams,  the  lowest  levels  incorporate  atomic  operators. 

The  goal  is  to  eventually  have  a  significant  number  of  those  implementations  via  components 
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from  the  software  base,  which  have  a  high  degree  of  reliability. 

b.  Time-Critical  or  Non  Time-Critical 

The  next  classification  of  an  operator  is  whether  it  is  time-critical  or  not.  Built 
into  the  definition  of  a  real-time  system  is  the  understanding  that  there  will  exist  operators  that 
have  a  constraint  on  how  long  they  have  to  complete  execution.  In  PSDL,  this  is  called,  its 
mcaimum  execution  time  (MET)  and  denotes  the  maximum  amount  of  CPU  time  the  operator 
can  use  for  execution.  If  an  operator  is  assigned  a  MET,  it  is  obviously  time-critical.  If  not,  it  is 
simply  an  operator  like  the  ones  we  have  all  seen  in  normal  non  real-time  systems.  Tune-critical 
operators  can  be  broken  down  into  two  further  categories. 

c.  Periodic  or  Sporadic 

Again,  only  time-critical  operators  (has  a  MET)  are  further  classified  as  to 
whether  they  are  periodic  or  sporadic.  A  periodic  operator  has  a  regular  interval  in  which  it  must 
fire  and  complete  its  execution.  It  is  assigned  a  period  (PER)  which  denotes  the  frequency  in 
which  the  Scheduler  makes  a  processor  available  for  execution.  Within  that  window,  the 
operator  must  fire  and  complete  execution.  It  is  assigned  a  finish  within  (FW)  time  that  denotes 
how  long  from  the  start  of  the  window  (PER)  before  execution  must  be  completed.  While  the 
FW  starts  at  the  beginning  of  the  PER,  the  MET  doesn’t  start  until  the  operator  fires  which  can 
be  after  the  beginning  of  the  PER. 

A  sporadic  operator  does  not  necessarily  have  a  regular  interval  in  which  it  fires 
and  is  triggered  by  the  arrival  of  new  data.  It  is  assigned  a  maximum  response  time  (MRT), 
which  is  the  maximum  amount  of  time  between  the  arrival  of  new  data  on  the  input  data 
stream(s)  (which  triggers  the  operator)  and  the  time  when  the  last  output  is  put  on  the  output 
data  streams.  In  addition,  it  is  assigned  a  minimum  calling  period  (MCP).  The  MCP  is  a  lower 
bound  on  the  delay  between  two  subsequent  arrivals  of  triggering  data  on  the  input. 

More  discussion  of  both  periodic  and  sporadic  operators  will  ensue  in  chapter 
five  when  covering  timing  and  control  constraints. 

2.  Streams 

Flows  between  operators  can  be  data,  control,  or  exception  information.  A  stream  is  a 
communication  link  that  connects  two  operators.  The  originator  of  the  stream  is  called  the 
producer  operator  while  the  user  of  the  stream  is  called  the  consumer  operator.  A  PSDL 
prototype  is  schedulable  only  if  the  graph  is  directed  and  contains  no  cycles.  This  is  more 
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commonly  referred  to  as  a  DAG  (directed  acyclic  graph).  When  a  cycle  occurs,  it  indicates  the 
presence  of  state  information  and  must  be  dealt  with. 

State  streams  are  the  means  by  which  state  information  and  hence  cycles  in  the  graph  are 
dealt  with.  The  state  stream  provides  a  way  of  declaring  and  initializing  the  state.  During 
scheduling,  it  is  actually  removed  from  the  graph.  Figure  3  shows  how  streams  are  depicted  in 
the  PSDL  Editor  of  CAPS.  Data  streams  can  be  broken  down  into  two  other  classifications. 

The  consumer  operator  determines  what  type  of  stream  it  is.  If  the  consumer  operator  has  a 
trigger  of  “Triggered  By  All”,  then  the  stream  is  a  data  flow  stream  (triggering  is  discussed 
below).  In  all  other  cases,  including  “Triggered  By  Some”,  it  is  a  sampled  stream. 


Figure  3.  Typical  diagram  of  a  stream.  Data  Streams  look  as  pictured. 
State  Streams  have  a  bold  arrowed  line  connecting  the  two  operators. 


A  data  flow  stream  guarantees  that  no  data  is  lost  or  duplicated  [Ref.  10].  It  is  like  a 
FIFO  queue  with  a  length  of  one.  A  consumer  reads  the  data  from  its  incoming  data  stream 
destructively  so  that  it  is  no  longer  there.  Underflow  occurs  if  it  attempts  to  read  an  empty 
stream.  Overflow  occurs  if  the  producer  operator  tries  to  put  new  data  to  the  stream  before  the 
consumer  has  read  the  old  data. 

Sampled  streams  do  not  guarantee  against  lost  or  duplicated  data.  They  are  like  a  single 
memory  variable  that  can  be  updated  or  read  zero  or  more  times.  In  addition,  reads  are  not 
destructive.  The  only  way  a  data  value  will  go  away  is  if  the  producer  replaces  it  with  another. 
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3.  Timers 

Timers  are  an  abstract  state  machine  that  act  like  a  stopwatch  [Ref.  10].  Used  for  things 
such  as  time-outs  or  refresh  rates,  they  keep  track  of  the  amount  of  time  that  elapses  between 
certain  events.  The  four  primitive  operations  are  READ,  START,  STOP,  and  RESET.  These  are 
absolutely  essential  in  a  real-time  system. 

4.  Triggers 

Any  operator  can  have  a  trigger  and  there  are  two  types;  BY  ALL  and  BY  SOME.  For 
example,  if  an  operator  has  “OPERATOR  A  TRIGGERED  BY  ALL  X,  Y”,  it  will  fire  when 
new  data  is  on  both  X  and  Y  data  streams.  X  and  Y  may  or  may  not  be  all  of  the  input  data 
streams.  This  guarantees  the  output  is  based  on  new  input  and  can  be  used  for  synchronization 
purposes.  If,  on  the  other  hand,  it  had  “OPERATOR  A  TRIGGERED  BY  SOME  X,  Y”,  it 
would  fire  when  either  data  stream  X  or  Y  had  new  data  on  them. 

5.  Conditionals 

There  are  two  kinds  of  conditionals  in  PSDL  which  control  the  input  and  output  of  an 
operator.  Conditionals  can  be  combined  with  other  constraints  including  triggers.  While  these 
could  be  implemented  within  the  operator  itself,  this  provides  a  quick,  clear  way  of  controlling 
the  operator,  assisting  in  the  goal  of  making  the  prototype  easier  to  modify. 

a.  Conditional  Execution 

Conditional  execution,  sometimes  called  execution  guards,  enforce  a  pre-condition 
before  allowing  the  operator  to  fire.  They  entail  the  keyword  “IF”.  The  following  example 
shows  that  the  operator  will  not  fire  until  the  condition  Brake_On  is  true:  “OPERATOR 
Suspend_Cruise_Control  TRIGGERED  IF  Brake_On”. 

b.  Conditional  Output 

Conditional  outputs,  sometimes  called  output  guards,  determine  whether  or  not  data  is 
written  to  the  output  data  stream.  It  does  not,  however,  have  any  control  over  the  firing  of  the 
operator.  The  condition  can  depend  on  operator  input/output  and  timer  values. 

6.  Exceptions 

PSDL  has  a  built  in  abstract  data  type  called  exception.  It  can  be  used  to  create 
exceptions  with  a  given  name,  detect  whether  a  value  is  an  exception,  and  determine  whether  a 
value  is  “normal”  (a  keyword  in  PSDL).  As  mentioned  previously,  they  can  be  transmitted  over 
data  streams. 
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B.  EDITORS 

There  are  several  editors  within  CAPS  providing  a  range  of  functionality.  From  basic 
editing  of  text  files  to  building  prototypes.  These  options/resources  fall  under  the  “Edit”  pull¬ 
down  menu. 

1.  PSDL  Editor 

A  prototype  is  built  with  the  PSDL  Editor.  It  is  composed  of  three  parts:  the  Syntax 
Directed  Editor,  the  Graph  Viewer,  and  the  Graphic  Editor.  They  allow  the  designer  to  create  the 
CAPS  data  flow  diagram  and  PSDL  program,  assigning  all  timing  and  control  constraints 
necessary  to  ensure  the  proper  design  of  the  prototype  and  its  components. 

The  Graphic  Editor  is  used  to  build  the  data  flow  diagram  and  to  specify  some  of  the 
timing  constraints.  This  provides  a  way  to  show  the  design  stracture  in  a  simple  diagrammatic 
way.  A  great  deal  of  information  can  be  represented  in  somewhat  simple  diagrams  and 
modification  is  quick  and  simple. 

The  Syntax-Directed  Editor  (SDE)  captures  the  information  already  entered  into  the 
Graphic  Editor.  Further,  it  allows  for  entering  PSDL  descriptions  that  are  free  of  syntax  errors 
by  immediately  notifying  the  user  when  they  arise.  It  is  this  functionality  that  is  extended  by  this 
thesis.  The  restrictions  imposed  by  the  constraints  have  an  impact  on  whether  the  prototype  is 
schedulable.  Chapter  IV  covers  these  restrictions  and  some  of  this  information  has  been 
incorporated  in  the  SDE  so  that  design  errors  related  to  timing  and  control  constraints,  in 
addition  to  syntax  errors,  are  discovered  while  still  in  this  early  phase  of  design.  Chapter  HI 
contains  an  example  on  creating  a  prototype. 

If,  while  in  SDE,  the  current  position  of  the  prototype  pertains  to  the  data  flow  diagram, 
the  Graph  Viewer  displays  that  view  of  the  data  flow  diagram.  This  helps  keep  the  designer 
keyed  into  exactly  what  part  of  the  prototype  s/he  is  currently  in  and  provides  an  outstanding 
overview  of  what  process  is  currently  under  review. 

2.  Text  Editor 

The  text  editor  can  be  one  of  several  text  editors  depending  on  which  one  is  chosen  as  the 
default.  CAPS  provides  a  convenient  interface  to  the  editor  chosen.  The  user  can  select  which 
editor  is  desired  by  choosing  “CAPS  Defaults”.  The  possibilities  are  vi ,  emacs,  and  the  Verdix 
Ada  Syntax  Directed  Editor. 
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3.  Interface  Editor 

Under  the  “Interface”  option,  CAPS  provides  a  seamless  interface  to  TAE+,  a  versatile 
tool  for  creating  and  manipulating  dynamic  window-based  user  interfaces.  When  done,  skeleton 
code  is  generated,  contributing  to  the  goal  of  generating  the  prototype  quickly  and  efficiently. 
TAE-i-  allows  for  code  to  be  generated  into  one  file  or  into  multiple  files.  While  generating  code 
under  CAPS,  the  single  file  option  is  normally  chosen  (can  be  multiple  files),  and  the  code  is 
placed  in  the  prototype  directory  called:  <prototype  name>.RAW_TAE_INTERFACE.a. 

4.  Requirements  Editor 

While  the  goal  is  to  have  a  tool  that  allows  mapping  from  the  requirements  to  the 
portions  of  the  prototype  that  implement  it,  at  current  the  “Requirements”  option  simply 
provides  a  window  that  lists  the  files  with  the  extension  “.req”.  From  there,  any  one  file  can  be 
selected  at  which  time  the  default  editor  is  utilized  to  make  necessary  changes. 

5.  Change  Request  Editor 

Like  the  requirements  editor,  the  “Change  Request”  option  brings  up  a  list  of  files  with  a 
specified  suffix;  this  time  “cr”.  Again,  the  user  picks  one  and  the  default  editor  is  summoned  to 
edit  that  file.  The  hope  is  for  this  option  to  call  a  sophisticated  change  request  tracking/editing 
tool. 

C.  EXECUTION  SUPPORT 

Rapidly  constructing  and  updating  a  prototype  depends  on  efficient  execution  support 
These  options/resources  fall  under  the  “ExecSupport”  pull-down  menu. 

1.  Translator 

The  Translator  “augments  the  implementations  of  the  atomic  operators  and  types  with 
code  realizing  the  data  streams  and  activation  conditions,  resulting  in  a  program  in  the 
underlying  programming  language  that  can  be  compiled  and  executed.”  [Ref.  10].  Essentially, 
it  generates  code  that  binds  the  components  extracted  from  the  software  base  or  custom  built, 
depending  on  whether  or  not  they  are  in  the  library. 

With  Ada  as  the  implementation  language,  it  translates  PSDL  code  into  Ada  wrapper 
code  to  realize  the  control  constraints  and  instantiates  Ada  tasks  for  PSDL  data  streams.  It 
expects  a  complete  PSDL  program  as  input,  and  creates  several  packages  which  make  up,  in 
part,  the  supervisor  module  of  the  prototype. 
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2.  Scheduler 

Because  real-time  systems  have  constraints  and  finite  resources  that  tend  to  introduce 
dependencies  between  the  functions  of  the  system  that  would  otherwise  be  independent,  small 
changes  can  significantly  impact  the  design  [Ref.  3].  And  because  scheduling  is  a  major  factor 
in  correctly  designing  a  real-time  system,  that  step  must  be  automated  so  that  excessive  amounts 
of  time  are  not  spent  on  scheduling  with  every  small  change  to  the  design. 

The  Scheduler  generates  two  schedules;  a  high  priority  Static  Schedule  and  a  low  priority 
Dynamic  Schedule.  The  former  allocates  time  slots  for  the  time  critical  operators  and  if 
successful  (the  protot5^e  is  schedulable),  all  operators  are  guaranteed  to  meet  their  required 
timing  constraints.  If  the  prototype  is  not  schedulable,  the  scheduler  gives  some  diagnostic 
information  tihat  can  help  the  designer  see  why. 

The  latter  invokes  the  non  constrained  operators  during  execution  with  the  time  slots  not 
previously  allocated.  Translation  is  required  before  scheduling  which  is  required  before 
compilation. 

3.  Compiler 

The  Compiler  option  interfaces  with  the  Sun  Ada  compiler.  The  prototype  must  have 
been  successfully  translated  and  scheduled  prior  to  compilation. 

D.  PROJECT  CONTROL 

1.  Evolution  Control  System 

As  the  size  of  a  project  gets  bigger,  the  number  of  people  working  on  that  project  grows. 
This  means  more  time  is  spent  on  communications  and  less  time  is  spent  on  analyzing/ 
designing,  etc.  Large  projects  also  dictate  a  longer  time  until  completion  which  means  more 
turnover  of  personnel.  Both  of  these  problems  can  be  minimized  by  ensuring  that  all 
documentation  is  stored  and  managed  on-line. 

The  Evolution  Control  System  (ECS)is  designed  to  give  automated  help  to  the  difficult 
task  of  coordinating  concurrent  efforts  of  prototype  design  team(s)  and  managing  the  multiple 
design  versions  that  can  be  produced.  The  prototype  development  data  is  stored  in  a  design 
database  (DDB)  for  persistent  storage. 
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2.  Merger 

The  Merger  helps  to  combine  the  product  of  two  or  more  independently  developed 
prototype  changes  thereby  facilitating  parallel  enhancements  and  applying  common  changes  to 
multiple  versions.  It  warns  of  possible  conflicts  in  the  merging  of  two  changes  and  when  none 
exists,  will  create  a  PSDL  program  for  the  newly  created  prototype. 

E.  SOFTWARE  BASE 

Accessible  through  the  “Databases”  pull-down  menu,  the  software  base  is  currently 
designed  to  provide  both  “Browse”  and  “Query”  capabilities  for  accessing  a  repository  of 
reusable  Ada  and  PSDL  components.  The  user  can  browse  by  either  types  or  operators  and  can 
query  by  keyword  or  PSDL  specification. 

Standards  on  how  to  specify  a  reusable  component  are  not  yet  in  place.  Because  of  this 
and  the  difficult  nature  of  the  task,  tools  for  finding  and  adapting  appropriate  software 
components  have  yet  to  live  up  to  expectations  for  strong  code  reuse.  Currently  based  on 
parameters,  work  on  this  part  of  CAPS  is  ongoing  to  provide  better  underlying  matching 
capabilities. 


ni.  THE  SYNTHESIZER  GENERATOR 

Attribute  Grammars  have  been  used  extensively  in  building  compilers  with  their  ability 
to  accomplish  translations  and  specification  of  static  semantic  analysis.  Attribute  Grammars 
have  been  used  in  porting  code  from  legacy  systems  to  newer  languages.  In  general,  they  have 
been  used  in  the  development  of  many  tools  of  modem  day  software  engineering  in  an  attempt 
to  provide  products  that  enhance  quality  and  productivity.  One  of  these  tools  is  the  Synthesizer 
Generator  which  is  used  to  generate  the  Syntax-Directed  Editor  (SDE)  within  the  PSDL  Editor. 
A  SDE,  language-based  editor,  or  smart  editor,  is  an  editor  tailored  to  a  specific  language  (in 
this  case,  PSDL),  utilizing  the  grammar,  structure,  and  static  semantics  of  that  language  to  assist 
the  user  in  writing  correct  programs. 

A.  BACKGROUND 

The  Synthesizer  Generator  (SynGen)  is  a  system  for  developing  smart  editors  which  use 
the  knowledge  of  the  language  itself  to  achieve  specialization.  It  automates  the  implementation 
of  a  desired  language  based  editing  environment.  The  knowledge  of  the  language  enables  the 
editor,  depending  on  how  it  is  built,  to  provide  feedback  to  the  user  concerning  whether  a 
program  contains  syntactic  or  semantic  errors,  where  they  are  and  recommendations  on  how  to 
fix  them.  Inconsistencies  can  be  identified,  along  with  other  t5q)es  of  analysis.  It  can  be  used  for 
conversions,  translations,  and  transformations.  Editors  produced  can  also  control  how  the  user 
proceeds  in  many  various  situations.  It  creates  the  language-specific  editor  from  a  specification 
of  the  language’s  abstract  syntax  (abstract  syntax  rules),  context-sensitive  relationships 
(Attribute  Rules),  display  format  (Unparsing  Rules),  concrete  input  syntax  (Concrete  Rules), 
and  transformation  rales  (Transformation  Rules)  and  performs  analysis,  translation,  and  error 
reporting  with  the  use  of  an  immediate-computation  paradigm  [Ref.  13].  The  rules  identified  in 
parenthesis  will  be  covered  individually  in  order  to  give  a  clear  representation  of  the  required 
specifications  for  a  SDE.  The  immediate-computation  paradigm  simply  means  that  all  attributes 
are  validated  with  each  and  every  update  of  the  program. 

Every  object  within  the  program,  including  the  whole  program  itself,  is  represented  as  a 
consistently  attributed  derivation  tree  that  goes  through  many  transformations  as  the  program  is 
edited.  The  rales  specified  according  to  the  language  are  used  to  check  these  attributes  with 
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every  program  modification  so  that  the  integrity  of  the  tree  stays  in  tact.  The  language  used  to 
do  the  specifications  is  called  the  Synthesizer  Specification  Language  (SSL),  which  is  built  upon 
a  foundation  of  attribute  grammar,  a  type  definition  facility,  and  the  application  domain  of 
language-based  editors  [Ref.  13]. 

B.  USES 

The  editor  created  can  be  a  hybrid  of  many  different  types  of  more  specialized  editors/ 
tools.  Understanding  this,  those  specialized  editors  and  tools  should  discussed  lightly. 

Structure  editors  view  a  program  as  a  hierarchical  composition  of  individual  structures. 
This  means  that  any  component,  including  the  whole  program  can  be  broken  down  into  its 
components.  These  structures,  also  called  templates  are  predefined  formatted  patterns 
representing  the  constructs  in  the  language;  a  For  Loop  for  example.  Seeing  a  program  this 
way  leads  to  constructing  it  by  inserting  templates  into  placeholders.  For  example,  if  you  wanted 
to  insert  a  FOR  LOOP  inside  an  existing  IF  statement,  you  would  highlight  the  placeholder 
inside  of  the  IF  statement  and  insert  the  FOR  LOOP  as  displayed  in  Figure  4.  If  the  FOR  LOOP 
template  was  highlighted  and  deleted,  the  old  placeholder  would  return.  Obviously  all  template 
insertions  are  controlled  and  therefore  ensure  correct  syntax. 


IF  <exp>  THEN 

<stmt>-^ - 

ELSE 

<stmt> 

END  IF; 


(~~n 


Highlighting  this  placeholder,  with  the 
mouse,  for  example,  and  then  inserting 
any  one  of  the  possible  statements 
(the  FOR  LOOP  in  this  example). 


IF  <exp>  THEN 

FOR  <identifier>  IN  <range>  LOOP; 

<stmt> 

END  LOOP 
ELSE 
<stmt> 

END  IF: 


The  statement  has  been  replaced 
with  the  FOR  LOOP  template. 


Figure  4.  Sample  display  of  using  templates. 


The  typical  text  editor  allows  for  character-oriented  and  line-oriented  textual  operations. 
This  is  the  type  of  editor  that  most  of  us  are  used  to  and  can  be  very  quick  when  the  user  is  very 
familiar  with  the  syntax  of  the  language.  SynGen  allows  for  both  forms  of  text  operations. 
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WYSIWYG  editors  allow  for  specialized  viewing  of  the  information  that  is  stored.  They 
can,  as  the  name  implies,  show  you  what  you  have.  They  can  also  display  information  in  a 
number  of  ways  that  can  benefit  the  user;  for  example,  some  forms  of  display  are  more 
informative.  By  allowing  for  the  control  of  what  is  displayed,  SynGen  can  achieve  variations  of 
WYSIWYG. 

Spreadsheet  applications  are  useful  in  that  whenever  an  update  is  made  in  the 
application,  changes  are  automatically  made  throughout.  In  SynGen,  this  aspect  is  captured  with 
its  immediate-computation  paradigm  previously  mentioned.  It  enables  the  editor  to  complete  the 
analysis,  error  message  generation,  and  code  generation  with  each  incremental  change.  This  is  a 
very  important  aspect  as  many  types  of  information  can  be  stored  and  updated  with  each 
modification.  Executable  code  can  be  output  with  each  change,  allowing  for  immediate 
feedback  on  changes  made.  This  becomes  a  significant  productivity  enhancement  when  going 
through  the  “modify,  run,  evaluate”  cycle  of  testing.  Correctness  and  proofs  can  be  supported/ 
maintained  while  editing  if  the  rules  are  spelled  out  in  the  SSL. 

Incremental  code  generation  was  just  mentioned  above.  But  what  about  generating  code 
based  on  knowledge  of  another  language  and  a  program  in  the  language.  This  is  a  hot  topic  with 
projects  that  seek  to  re-engineer  existing  systems.  There  are  many  legacy  systems  that  have  littie- 
to-no  documentation.  This  lack  of  documentation  makes  software  engineers  very  reluctant  to 
tackle  these  systems  when  it  comes  to  re-writing  in  newer  languages.  SynGen  can  help 
significantly  with  this  difficult  task. 

C.  BUILDING  AN  EDITOR 

The  objective  of  this  chapter  is  to  familiarize  the  reader  with  the  SynGen  and  how  it 
works.  For  a  full  and  in-depth  analysis  of  the  SynGen,  see  references  [Ref.  13, 15].  The  ideal 
editor  will  normally  have  a  combination  of  all  the  features  discussed  above  making  it  a  hybrid 
editor.  Building  an  editor  requires  that  five  different  specifications  be  made  in  SSL.  As  these 
specifications  are  outline,  also  covered  will  be  terminology  of  the  SynGen.  The  five 
specifications,  mentioned  earlier,  are  abstract  syntax,  context-sensitive  relationships,  display 
format,  concrete  input  syntax,  and  transformation  rules.  Before  doing  that  however,  it  might 
be  more  useful  to  first  define  a  small  language  to  help  with  explanations.  Look  at  Figure  5, 
which  is  the  small  subset  of  PSDL  used  in  designing  the  initial  SDE  for  CAPS  [Ref.  14].  This 
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subset  should  be  small  enough  to  provide  a  good  example  and  large  enough  to  get  the  reader  a 
little  accustomed  to  PSDL.  The  complete  PSDL  grammar  is  in  Appendix  A. 


psdl 

=  {component} 
component 

=  data_type  I  operator 
data_type 

=  "type"  id  type__spec 
operator 

=  "operator"  id  operator_spec 
type_spec 

=  "specification"  [type_decl]  "end" 
operator_spec 

=  "specification"  (interface)  "end" 
interface 

=  attribute  [reqmts_trace] 
attribute 

=  input  I  output 
input 

=  "input"  type_decl 
output 

=:  "output"  type^decl 
reqmts_trace 

=  "by  requirements"  id_list 
type_decl 

=  id_list  ":"  id 
id_list 

=  id  { " , "  id) 
id 

=  letter  (alphanumeric) 
a 1 phanume r i c 

=  letter  I  digit 
letter 

=  "a..z"  I  "A..Z"  I 
digit 

=  "  0  .  .  9  " 


Figure  5.  Subset  of  PSDL  Grammar, 

This  may  look  somewhat  confusing  at  first,  but  is  really  rather  simple  after  a  few 
minutes  worth  of  inspection.  Brace  brackets  ({ })  indicate  zero  or  more  iterations,  while  square 
brackets  ([])  indicate  zero  or  one  iteration.  The  pipe  (I)  and  a  small  circle  with  a  plus  sign  in  it 
(used  in  the  next  figure)  indicates  exclusive-or.  One  might  read  this  as,  a  psdl  prototype  is 
composed  of  zero  or  more  components,  which  are  each  either  a  data_type  or  an  operator.  A 
data_type  is  composed  of  the  literal  “type”,  an  id,  and  a  type_spec,  and  so  on. 

Figure  6  depicts  the  same  information  in  a  form  that  may  be  more  useful.  The  only  trae 
terminal  nodes  on  this  tree  are  the  ones  surrounded  in  quotes.  Other  nodes  that  are  leafs  are 
further  expanded  somewhere  else  in  the  tree.  The  thing  to  remember  is  that  much  like  a 
compiler,  SynGen  will  search  the  tree  until  it  correctly  reaches  a  terminal  node  ensuring  that  the 
pieces  of  the  program  match  the  syntactic  constraints  of  the  language. 
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1.  Abstract  Syntax  Rules 

The  abstract  syntax  is  the  core  of  the  editor  and  is  defined  as  a  set  of  grammar  rules. 
Anything  constructed  or  modified  within  the  editor  will  be  represented  by  a  derivation  tree  that 
is  built  based  on  the  grammar.  It  maintains  how  legal  tokens  and  productions  are  allowed. 
Figure  7  shows  one  of  several  possibilities  for  representing  the  abstract  rules  for  the  grammar 
previously  defined.  Not  all  of  the  productions  were  specified  to  keep  its  size  more  manageable. 


root  prototype; 

/*****  PARTIAL  PSDL  LEXEMES  ****/ 

BOOLKW 

:  <"BOOLEAN"  > 

I  < "boolean"  >; 

TRUEKW 

:  <"TRUE"  > 

[  <"true"  >; 

FALSEKW 

:  <" FALSE"  > 

I  <" false"  >; 

IDENTIFIER 

:  IdentLex< [a-zA-Z] [a-zA-Z_0-9] *  >; 

/^****  PARTIAL  PSDL  PRODUCTIONS  ****/ 

prototype 

:  Prot (psdl_components ) ; 
list  psdl_components ; 
psdl_components 
:  PsdlNilO 

I  PsdlPair (component  psdl_components) ; 
component 

:  ComponentNull { ) 

!  Data (id  type_spec) 
i  Op (id  operator_spec) ; 
operator_spec 

:  OpSpec ( interface_iist ) ; 

type_spec 

:  TypeSpec (optional_type_declaration) ; 

optional  list  optional_interface; 
inter  face__li  St 

:  InterFaceNil ( ) 

!  InterFaceList (interface  interface_list ) ; 
interface 

:  InterfaceNull ( ) 

1  Interface (attribute  optional_requirements ) ; 
attribute 

:  Input ( type_dec 1 ) 

I  Output ( type_dec 1 ) ; 
optional  optional_requirements ; 
opt  iona  l__r  equir  ement  s 
:  optReqmtsTraceNull ( ) 

1  OptReqmtsTracePrompt ( ) 

I  OptReqmtsTrace ( id_list } ; 
type_decl 

:  TypeDecl ( id_list  id) ; 

op  t i ona 1  op t i ona 1_ t yp e_de c 1 a  r a  t i on ; 
opt iona l_type_declarat ion 
:  OptTypeDeclNull ( ) 

!  OptT^eDecl  (id_list  id)  ; 
list  id_list; 
id_list 

:  IdNilO 

I  IdPair(id  id_list) ; 
id 

:  IdNullO 

i  Id( IDENTIFIER) ; 


Figure  7.  Abstract  Syntax  Declarations. 
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Before  proceeding,  some  of  SynGen’s  terminology  should  be  explored.  These  first  three 
definitions  are  recursively  defined  and  will  make  a  beginner’s  head  hurt  until  s/he  has  gone 
through  several  examples.  A  phylum  is  a  set  of  terms.  A  term  is  the  result  of  applying  a  k-ary 
operator  to  k  terms  of  the  appropriate  phyla  (plural  of  phylum).  A  k-ary  operator  is  a 
constmctor-function  mapping  k  terms  to  a  term  [Ref.  15].  The  phylum  associated  with  a  non¬ 
terminal  is  the  set  of  derivation  trees  that  can  be  derived  from  it.  Those  derivation  trees  (called 
terms)  are  derived  by  going  through  the  productions  identified  by  the  operators.  We  will  see  an 
example  of  this  shortly.  Phylum  declarations  are  either  productions  or  lexemes.  The  legal 
production  declarations  allowed,  which  are  described  in  the  abstract  syntax  rules,  take  on  a  form 
something  like: 

phylum-name  :  operator_name  (phylumj^,  phylum2, ... ,  phylumi^); 

where: 

phylum_name  is  the  particular  phylum  this  production  applies  to, 
operator_name  is  any  legal  identifier  that  refers  to  a  particular  production,  and 
phylumj  represents  a  non  terminal  of  the  grammar. 

The  legal  tokens  allowed,  defined  by  the  lexeme  declarations  within  the  abstract  syntax 
rules,  take  on  a  form  such  as: 

phylum-name  :  lexeme_name  <  regular_expression  >; 

where: 

phylum_name  is  the  particular  phylum  this  lexeme  belongs  to, 
lexeme_name  is  used  in  the  definition  of  the  concrete  input  grammar,  and 
regular_expression  is  the  description  of  the  token. 

A  few  more  definitions  are  required  at  this  point  Each  phylum  contains  a  unique  term 
called  its  completing  term  and  placeholder  term.  While  the  same  term  can  be  both,  there  are 
differences  between  them  that  must  be  discussed.  The  completing  term  is  used  to  construct  the 
derivation  tree’s  default  representation.  Whenever  there  is  an  unexpanded  occurrence  of  a 
phylum  in  the  derivation  tree,  there  will  be  an  instance  of  the  appropriate  completing  term.  The 
placeholder  term  identifies  where  subterms  can  be  inserted  or  swapped.  This  will  become  more 
apparent  when  the  transformation  and  unparsing  rules  are  covered.The  first  operator  declared  for 
a  phylum  is  that  phylum’s  completing  operator.  The  completing  operator  is  used  to  build  the 
completing  term;  it  is  always  the  first  operator  in  the  completing  term.  The  rest  of  the 
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completing  term  depends  on  whether  it  is  ordinary,  a  list,  or  optional. 

With  ordinary  phyla  (not  list  nor  optional),  both  completing  and  placeholder  terms  are 
created  by  applying  the  completing  operator  to  the  completing  terms  of  its  arguments.  Nullary 
terms  are  stopping  points  and  their  parenthesis  are  optional.  For  example,  the  completing  term 
for  type_name  is  TypeName(IdNull).  The  completing  operator  of  type_name  is  TypeName,  and 
it  has  only  one  argument.  The  completing  operator  of  its  argument,  id,  is  IdNull,  which  is  a 
nullary  operator.  See  Figure  8  below  to  show  the  components  affected. 


If  the  phylum  is  of  non-optional  list  phyla,  the  completing  term  and  placeholder  term  are 
also  equal  and  are  built  by  applying  its  binary  operator  to  the  completing  term  of  its  left 
argument  phyla  and  to  the  list’s  nullary  operator  [Ref.  13],  resulting  in  a  singleton  list.  This 
makes  more  sense  when  it  is  realized  that  all  list  phyla  must  have  two  argument  phyla,  where 
the  first  is  another  phylum  and  the  second  is  the  list  itself  (all  lists  are  right  recursive).  For 
example,  the  completing  term  for  idjist  is  IdPair(IdNull,  IdNil).  The  binary  operator  is 
“IdPair”,  the  completing  term  of  its  left  argument  is  “IdNull”,  and  the  list’s  nullary  operator  is 
“IdNil”.  A  look  back  to  Figiure  7  will  help  follow  this  reasoning. 

Attempting  a  combination  involves  using  both  rules.  For  example,  the  completing  term 
of  type_decl  is  TypeDecl(IdPair(IdNull,  IdNil),  TypeName(IdNull)).  Noting  that  type_decl  is 
ordinary,  you  combine  the  completing  operator,  TypeDecl,  to  the  completing  terms  of  its 
arguments;  id_list  and  type_name.  Since  their  completing  terms  are  already  known  (fi-om  the 
last  two  paragraphs),  it  now  just  a  matter  of  combining  them. 

When  dealing  with  optional  phyla,  the  completing  term  and  placeholder  term  are 
different.  For  optional,  non-list  phyla,  the  completing  term  is  built  from  its  first  nullary  operator 
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while  the  placeholder  term  is  built  from  the  first  operator  after  the  placeholder  term.  For 
example,  the  completing  term  of  optional_requirements  is  OptReqmtsTraceNuU.  The 
placeholder  term  is  OptReqmtsTracePrompt.  These  two  nullary  terms  are  in  the  optional  phyla 
because  the  first  will  result  in  nothing  being  displayed  in  the  editor  while  the  second  will  allow 
the  editor  to  display  a  prompt.  This  is  covered  in  the  unparsing  rules. 

With  the  last  category,  optional  list  phyla,  the  completing  term  is  the  nullary  operator 
and  the  placeholder  is  the  same  as  for  the  non-optional  list  phyla  covered  above. 

2.  Attribute  Rules 

So  far,  the  underlying  structure  of  the  editor  has  been  described.  The  next  question  that 
comes  to  mind  is  how  aU  of  the  syntactic  and  semantic  checking  /analysis  is  done.  This  involves 
various  parts  of  the  derivation  tree  knowing  about  and  having  some  sort  of  an  understanding  of 
other  parts  of  the  tree.  In  other  words,  information  must  be  passed  up/down  and  back/forth 
within  the  derivation  tree.  It  is  accomplished  with  attributes  and  attribute  equations. 

The  attribute  rules  make  up  an  attribute  grammar,  which  is  a  context-free  grammar 
(CFG)  that  is  extended  by  the  use  of  attributes  which  are  attached  to  non-terminals  and  defined 
by  attribute  equations  [Ref.  13].  There  are  several  kinds  of  attributes  available  to  SynGen. 
While  all  are  covered  in  the  references  [Ref.  13, 15],  only  three  will  be  discussed  here  as  they 
apply  direcdy  to  the  SDE  within  CAPS. 

The  editor  designer  can  use  local  attributes,  which  are  associated  with  a  particular 
production.  They  are  declared  with  the  reserved  word,  “local”  and  are  declared  with  the 
production  attribute  equations.  The  format  of  a  local  attribute  declaration  is  as  follows. 

local  attributetype  attribute_  name; 

where: 

local  is  a  keyword, 
attribute_type  is  any  predefined  type, 
attribute_name  is  any  valid  identifier. 

The  attributes  that  are  associated  with  phyla,  instead  of  productions,  are  broken  into  two 
mutually  exclusive  (disjoint)  sets:  synthesized  attributes  and  inherited  attributes. 

Synthesized  attributes  are  attributes  that  are  built  up.  They  are  attributes  whose  values 
are  propagated  to  the  left  in  attribute  equations  and  up  the  attributed  tree.  An  example  will  be 
given  in  a  moment. 
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Inherited  attributes  are  attributes  that  are  passed  down.  They  are  attributes  whose  values 
are  propagated  to  the  right  in  attribute  equations  and  down  the  attributed  tree.  The  attribute 
declaration  format  is  as  follows. 

a  phylum  { synthesized  attribute_phylum  attribute  name; 

inherited  attribute_phylum  attribute_name;}; 

where: 

a_phylum  is  the  phylum  or  phyla  (comma  separated)  that  will  have  the  attribute, 
synthesized  is  the  keyword  to  declare  a  synthesized  attribute  (syn  is  OK), 
inherited  is  the  keyword  to  declare  an  inherited  attribute  (inh  is  OK), 
attribute_phylum  is  the  attributes  type  and  can  be  built-in  or  used  defined, 
attribute_name  is  any  valid  identifier. 

It  should  also  be  mentioned  that  the  two  attributes  can  be  in  either  order  and  can  be  in 
separate  declarations  if  desired. 

Attribute  equations,  which  are  used  to  assign  values  to  attributes  and  evaluate  values  of 
attributes,  take  on  a  slightly  different  form  depending  on  if  they  are  for  synthesized  or  inherited 
attributes.  The  synthesized  attribute  equation  and  inherited  attribute  equation  respectively,  are  as 
follows. 

phylum_name.attribute_naine  =  subordinate_phyluin_value; 
subordinate_phylum_value  =  phylum_nanie.attribute_name; 


where: 

phylum_name  is  the  phylum  that  owns  the  attribute, 
attribute_name  is  the  attribute  owned  by  phylum_name, 
subordinate_phylum_value  is  a  little  bit  tricky.  It  can  be  any  value  consistent 
with  the  attribute’s  type  including  another  attribute,  the  same  attribute  from  another  phylum,  or 
a  function  call,  and  is  associated  with  a  lower  level  of  the  attributed  tree. 

In  some  abstract  syntax  declarations  (a  list  for  example),  the  phylum_name  is  mentioned 
more  than  once.  Because  of  this,  additional  notation  must  be  introduced.  The  phylum_name  by 
itself  implies  its  first  occurrence.  Another  way  to  depict  this  is  with  $$.  The  second  occurrence, 
would  be  indicated  as  phylum_name$2.  Then,  every  subsequent  occurrence  gets  the  number 
after  the  $  symbol  incremented  by  one. 
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As  an  example,  review  the  abstract  syntax  presented  in  Figure  7  above  and  notice  that  a 
prototype  is  simply  a  list  of  components.  Recall  that  all  lists  are  binary  and  right  recursive.  A 
component  is  either  a  data_type  denoted  with  the  phylums  id  and  type_spec,  an  operator  with 
the  phylums  id  and  operator_spec,  or  null.  The  id  simply  identifies  the  name  of  that  component, 
whether  it  be  a  type  or  operator.  Obviously,  we  do  not  want  two  components  to  have  the  same 
name,  regardless  of  whether  they  are  types  or  operator. 

In  the  PSDL  Editor,  the  graphic  editor  allows  the  designer  to  draw  and  name  operators. 
This  information  is  propagated  to  the  prototype  when  exiting  back  to  the  SDE.  That  means  the 
operators  are  already  defined  when  you  enter  the  SDE.  It  might  be  beneficial  to  notify  the 
designer  when  trying  to  assign  a  new  data_type  with  the  same  name  as  an  existing  operator. 
After  the  designer  enters  three  operators  (Opl,  C)p2,  OpS)  in  the  graphic  editor  and  returns  to 
SDE,  the  attributed  tree  would  look  similar  to  Figure  9  (attributes  are  bold  typed). 


prototype 


psdl_components 


Figure  9.  Partial  Derivation  Tree  after  returning  from  Graphic  Editor. 
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The  information  about  operator  names  must  be  sent  to  where  data_type  names  are 
declared.  Another  way  of  saying  this  is  that  operator  id  attributes  must  be  synthesized  and  then 
inherited  by  the  data_type.  Currently,  there  are  only  three  components,  and  all  three  are 
operators.  When  data_types  are  added,  the  list  of  psdl_components  will  grow  containing  both 
operators  and  data_types. 

The  first  thing  that  must  be  done  is  to  collect  up  all  the  operator  id’s.  Because  they  exist 
at  the  id  phylum,  that  is  where  we  will  put  the  synthesized  attribute  declaration.  That  attribute 
will  be  passed  up  to  the  component  phylum  so  it  too  will  need  an  id  attribute.  And  because  they 
will  be  collected  up  into  a  set  at  the  psdl_component  level  and  subsequently  passed  to  the 
prototype  level,  we  must  define  a  structure  to  hold  a  set  of  id’s  and  declare  attributes  of  that  type 
at  the  psdl_component  phylum  and  the  prototype  phylum.  Of  course  the  skeleton  attribute 
grammar  must  be  in  place  for  this  to  be  inserted  into.  It  looks  like  the  production  portion  of  the 
abstract  syntax  declarations  displayed  earlier.  See  Figure  10  to  understand  what  is  required  in 
collecting  all  operator  id’s  at  the  prototype  phylum.  All  additions  to  the  abstract  syntax  are  in 
bold  type. 
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prototype,  psdl.components  {syn  id_set  syn_op_id_setnjW  Attribute  declarations ) 
component  {syn  id  syn_op_id ;  }  - - - ' 

prototype  ^opy  the  id  list  from  psdl_components 

:  Prot  {psdi_components)  ;  ^  protoype.syn_op_id_set 

$  $  ♦  syn_op_id_set  =  psdl_component  s  •  gyr»^p_i  ^ 

list  psdl_components;  _ ^ 

psdl_components  /Tf  you  have  a  PsdlPair  then  union  the 

:  PsdiNilO  componenLsyn_op_id  with  the  current 

$$.syn_op_id_set  =  IdSetNil; - -  V  PsdLcomponents.syn_opJd^set  Else, 

I  PsdlPair  ( component  psdl_components )  ;  \union  IdSetNil  with  it, 

$  $ .  syn__op_id_set  =  Id_Set_JJnion  ( component  *  syn_op_id  / 

psdl_components$2 . syn_op_id_set ) ; 

component  ' 

:  ComponentNull ( ) 

$$.syn_op_id  =  IdNull; 


I  Data (id  type^spec) 

$$.syn_op_id  =  IdNull;^ 

I  Op {id  operator_spec) ; 

$$.syn_op_id  =  id;^ 

operator_spec 

:  OpSpec(interface_list); 
type_spec 

:  li^eSpec  (optional_type_declaration)  ; 
optional  list  optional_interface; 
interface_list 

;  InterFaceNil ( ) 

I  InterFaceList ( interface  interface_list ) ; 
interface 

:  InterfaceNull ( ) 

i  Interface (attribute  optional_requirements) ; 
attribute 

:  Input ( type_dec 1 ) 

I  Output ( type_decl ) ; 
optional  optional_requirements; 
optional_requirements 
:  OptReqmtsTraceNull ( ) 

I  OptReqmtsTracePrompt ( ) 

1  OptReqmtsTrace { id_list ) ; 
type_decl 

:  TypeDecl ( id_list  id); 
op  t iona 1  opt iona l_type_dec lar a t i on ; 
optional_type_declaration 
:  OptTypeDeclNull ( ) 

I  OptTypeDecl ( id_list  id) ; 
list  id_list; 
id__list 

:  IdNilO 

I  IdPair(id  id_list) ; 
id 

:  IdNull 0 

I  Id ( IDENTIFIER ); 


This  is  a  function  .desiL„_ 
the  Union  or  an  la  arfd  a  set 


If  the  current  component  is  an  operator, 
then  assign  the  id  to  component.s5m_op_id,) 
Else,  assign  null  to  it. 


note 

The  phylum  id_set  would  look  like  this. 

id_set 
:  IdSetNil 
1  IdSet(id  idset); 

This  would  have  to  be  added  to  the  existing 
abstract  syntax  rules  or  defined  elsewhere 
to  denote  user-defined  abstract  syntax. 


Figure  10.  Partial  Abstract  Grammar  showing  Synthesized  Attributes. 


When  studying  the  changes  made  for  attribution,  notice  the  way  upper  and  lower  case  is 
used.  This  is  very  important  to  help  keep  from  getting  confused  when  looking  at  larger 
specifications  such  as  that  for  psdl. 

Figure  9  was  duplicated  in  Figure  1 1  below  except  that  the  newly  declared  synthesized 
attributes  are  attached  to  the  appropriate  phylum. 
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Figure  11.  Partial  Derivation  Tree  reflecting  Synthesized  Attributes. 


Now  we  have  all  the  operator  id’s  at  the  prototype  phylum.  The  next  thing  to  do  is  to 
send  that  list  of  operator  names  back  down  to  the  component  phyla  so  that  whenever  a  data_type 
is  about  to  be  identified,  the  editor  can  make  sure  the  id  doesn’t  already  exist.  The  nullary  phyla 
do  not  have  need  of  it,  as  they  have  nothing  to  compare  it  against.  It  is  much  simpler  and  is 
essentially  the  same  process,  only  in  reverse;  it  is  inheritance,  and  is  shown  in  Figure  12.  The 
only  possible  tricky  part  is  when  dealing  with  lists.  At  phylum  psdl_components,  the  list  must 
be  passed  down  to  the  current  component  and  to  the  rest  of  the  list  (psdl_components$2). 
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prototype,  psdl_c proponents,  component  {inh  id_set  inli_op_id__set ;  } ; 

^his  attribute  was  built  in  Fig  lO&ll^ 

prototype  ^  "T  ^ 

:  Prot (psdi_components) ;  W 

$$,inh_op_id_set  =  $$ .syn_op_id_set; 
psdl^components . inh_op_id_set  =  $$ . inh_op_id_set ; 

list  psdl_components; 
psdl_components 
:  PsdlNilO 

t  PsdlPair (component  psdl_components) ; 

component .  inh_op_id_set  =  $$ .  inli_op_id_set ; 

psdl_coroponents$2 .  inli_op_id_set  =  $$ .  inh_op_id_set ; 

component 

:  ComponentNull ( ) 

1  Data (id  type_spec) 
i  Op (id  operator_spec) ; 
operator_spec 

:  OpSpec ( interface_list ) ; 
type_spec 

:  T^eSpec  (optional_type_declaration)  ; 
optional  list  optional_interface; 
interface_list 

:  InterFaceNil ( ) 

1  InterFaceList ( interface  interface_list) ; 
interface 

:  InterfaceNull ( ) 

1  Interface (attribute  optional_requirements) ; 
attribute 

:  Input ( type_dec 1 ) 

I  Output ( type_decl ) ; 
optional  optional_requirements ; 
optional_requirements 
:  OptReqmtsTraceNull ( ) 

I  OptReqmtsTracePrompt ( ) 

I  OptReqmtsTrace( id_list ) ; 
type_decl 

:  TypeDecl { id_list  id)  ; 
op t i ona 1  opt iona l_type_dec la  r a  t ion ; 
optional_type_declaration 
:  OptTypeDeclNull ( ) 

I  OptTypeDecl ( id_list  id) ; 
list  id_list; 
id_list 

:  IdNilO 

I  IdPair(id  id_list); 
id 

:  IdNullO 

I  Id( IDENTIFIER) ; 


Figure  12.  Partial  Abstract  Grammar  showing  Inherited  Attributes. 


The  problem  now  is  that  the  component  has  the  list  but  doesn’t  know  what  to  do  with  it. 
This  answer  to  this  involves  the  use  of  local  attributes,  rules  defining  error  attributes,  and 
possibly  auxiliary  functions.  The  functions  for  defining  error  attributes  and  auxiliary  functions 
can  be  with  the  attribute  rules  or  within  another  file  (more  common). 

First,  declare  a  local  BOOL(predefined  in  SSL)  attribute  called  duplicate_id_error  within 
the  component  phylum  under  the  Data  operator.  This  will  be  set  to  true  if  the  current  data_type 
id  already  exists  within  the  inh_op_id_set.  Then  a  function  must  be  written  to  search  the  list  for 
the  data_type  id.  Figure  13  shows  where  this  would  be  added. 
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Function  that  checks  to  see 
if  id  is  in  the  id  set. 


Set  (id,  $$  .syn_op_id_set)  ; 


prototype 

:  Prot {psdl_components ) ; 

list  psdl_components; 
p  s  d l_c ompon en t  s 
:  PsdlNilO 

!  PsdlPair (component  psdl_components) ; 
component 

:  ComponentNull ( ) 
i  Data (id  type_spec) 

local  BOOL  duplicate_id_error; 
duplicate_id_error  =  Id_In_OpJld 
local  STR  duplicate_id_msg; 
duplicate_id_msg  =  (duplicate_id_error) 

?  "\n" 

#"  This  id  is  already  an  operator  id, 

•  /ii/ . 

•  / 

I  Op (id  operator_spec) ; 
operator_spec 

:  opSpec (interface_list) ? 

type_spec 

:  TypeSpec ( optional_type_deciaration) ; 

optional  list  optional_interface; 
interface_list 

:  InterFaceNil ( ) 

I  interFaceList ( interface  interface_list) ; 
interface 

:  InterfaceNull ( ) 

i  Interface (attribute  optional_reguirements); 
at tribute 

;  Input ( type_decl ) 

1  Output  ( type_decl )  ; 
optional  optional_requirements; 
op t i ona l_requi remen t s 
:  OptReqmtsTraceNull ( ) 

I  OptReqmtsTracePrompt ( ) 

I  OptReqmtsTrace(id_list); 
type_decl 

:  TypeDecl ( id_list  id) ; 

optional  optional_type_declaration; 
opt iona l_type_declarat ion 
:  OptTypeDeclNull ( ) 

I  Optl^eDecl  (  id_list  id)  ; 
list  id_list; 
id_list 

:  IdNilO 

IdPair(id  id_list) ; 


id 


IdNulK  ) 

Id (IDENTIFIER) ; 


Figure  13.  Partial  Abstract  Grammar  showing  Inherited  Attributes. 


Most  of  SSL  including  the  auxiliary  functions  that  can  be  written  are  very  much  like  the 
C  language.  The  “!”  symbol,  for  example,  means  Not  and  the  “(expression)  ?  is  a  conditional 
expression.  Figure  14  below  shows  what  the  Id_In_Op_Id_Set  would  look  like  as  an  auxiliary 
function.  Immediately  following  that  is  Figure  15  which  represents  the  newly  declared  inherited 
attributes  attached  to  the  appropriate  phylum. 


32 


BOOL  Id_In_Op_I(i_Set(id  data_type_name,  id_set  operator_names)  { 
with(opeiator_names)  ( 

IdSetNil:  false, 

IdSet(head,  tail): 

(head  —  data_type_name) 

?  true 

:  Id_In_Op_Id_Set(data_type_name,  tail) 

) 

}; 


Figure  14.  Auxiliary  Function. 


In  Figure  16,  all  of  the  attribute  modifications  are  reflected  at  once.  There  are  no  big 
surprises  except  for  combining  synthesized  and  inherited  attributes  in  the  same  declaration.  The 
next  section  will  concentrate  on  what  the  user  sees,  including  notification  of  an  error  identified 
in  the  attribute  rules. 
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prototype,  psdl__components  {syn  id_set  syii_op_id_set ; 

inh  is_set  inh_op_id_set ; } ; 
component  {syn  id  syn_op_id; 

inh  id_set  inh_op_id_set ; } ; 

prototype 

:  Prot (psdl„components ) ; 

$  $ .  syn_op_id_set  =  psdl_component  s .  syn_op_id_set ; 
psdl_component  s  *  inh_op_id_set  =  $  $ .  inh__op_id_set ; 

list  psdl_components; 
psdl_components 
:  PsdlNil ( ) 

$$ •syn_op_id_set  =  IdSetNil; 

I  PsdlPair (component  psdl_components) ; 

$  $ . syn_op_id_se t  =  Id_Set_Union ( component . syn_op_id , 

psdl_components$2 . syn_op_id_set ) 
component .  inh_op_id_set  =  $  $ .  inh_op_id_set ; 

psdl_components$2  *  inh_op_id__set  =  $$ .  inh_op_id_set ; 

component 

:  ComponentNul 1 ( ) 

$$ . syn_op_id  =  IdNull ; 

1  Data ( id  type_spec ) 

$$.syn_op_id  =  IdNull; 

local  BOOL  duplicate_id_error; 

duplicate_id_error  =  Id_In_Op_Id_Set (id,  $ $ . syn_op_id_set ) ; 
local  STR  duplicate_id_msg; 
duplicate_idjmsg  =  (duplicate_id_error) 

?  "\n" 

#"  This  id  is  already  an  operator  id*" 

•  ////  * 

•  # 

i  op ( id  operator_spec ) ; 

$  $ . syn_op_id  =  id ; 

operator_spec 

:  OpSpec ( inter face_list) ; 
t^Ype_spec 

:  T^eSpec(optional_type_declaration)  ; 

optional  list  optional_interface; 
interface_list 

:  InterFaceNil ( ) 

I  interFaceList (interface  interface_list} ; 
interface 

:  InterfaceNull ( ) 

I  Interface (attribute  optional_requirements) ; 
attribute 

:  Input ( type_decl ) 

I  Output ( type_decl ) ; 
optional  optional_requirements; 
optional_requirements 
:  OptReqmtsTraceNull { ) 

I  OptReqmtsTracePrompt ( ) 

I  OptReqmtsTrace { id_list ) ; 
type_decl 

:  TypeDecl { id_list  id) ; 

optional  optional_type_declaration; 
opt iona l_type_dec larat ion 
:  OptTypeDeclNull ( ) 

I  OptT^eDecl  ( id_list  id)  ; 
list  id_list; 
id_list 

:  IdNiiO 

[  IdPair(id  id_list) ; 
id 

:  IdNull 0 

I  Id(  IDENTIFIER) ; 


Figure  16.  Partial  Abstract  Grammar  Showing  All  Attributes. 
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3.  Unpaxsing  Rules 

As  just  mentioned,  the  editor  can  now  determine  if  the  user  is  attempting  to  assign  an 
operator  name  to  a  data_type  that  already  exists.  In  fact,  there  is  a  local  attribute  that  contains 
the  message  to  be  displayed  to  the  user  if  this  situation  arises.  It  is  up  to  the  unparsing  rules  to 
display  the  string  defined  in  the  attribute  rules.  The  unparsing  rules  define  everything  that  the 
user  sees.  They  also  controls  which  nodes  of  the  abstract  syntax  tree  are  selectable  and  which 
productions  are  editable.  The  form  in  which  unparsing  rules  appear  is  as  follows. 

phylum  :  operator  [  unparsing  syntax  ]; 

where: 

operator  and  phylum  match  the  abstract  syntax  one  for  one,  and  the 
unpaxsing_syntax  is  the  specification  for  how  that  part  of  the  tree  is  displayed  and 
is  broken  up  into  a  left  side  and  a  right  side,  coinciding  with  the  productions  of  the  abstract 
syntax  tree.  The  left  and  right  side  are  divided  by  a  denoting  immutable  text,  or  a 
denoting  mutable  text. 

There  is  another  symbol  called  the  selection  symbol  which  represents  the  position  of 
each  phylum  occurrence.  Which  one  is  used  depends  on  whether  or  not  that  phylum  occurrence 
should  be  a  resting  place  for  the  editor.  The  selection  symbol  specifies  that  the  phylum  is  a 
resting  place  while  the  selection  symbol  specifies  that  it  is  not.  The  designer  of  an  editor 
must  keep  in  mind  that  almost  all  phyla  exist  once  on  the  right  hand  side  (RHS)  and  once  on  the 
left  hand  side  (LHS).  Therefore,  if  a  phylum  is  or  is  not  to  be  selectable,  both  occurrences  must 
be  considered.  It  makes  sense  to  use  one  side  or  the  other  to  determine  selectability.  The 
examples  here  will  use  the  LHS,  which  means  the  selection  symbols  on  the  RHS  will  be 

Control  characters  are  allowed  to  help  control  the  display  of  the  screen.  Table  1  Usts 
them,  while  only  three  will  be  used  here;  %t  for  tab,  %b  for  back  tab,  and  %n  for  newline. 
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command 

%t 

move  the  left  margin  one  indentation 

unit  to  the  right 

%b 

move  the  left  margin  one  indentation 

unit  to  the  left 

%n 

newline,  return  to  the  current  left 

margin 

%1 

return  to  the  current  left  margin  and  overprint 

%1 

move  to  column  one  of  the  same  line 

and  overprint 

%T 

move  right  to  the  next  tab  stop 

%M(c) 

move  right  to  column  c,  where  c  is  a 

positive  integer 

%o 

optional  newline,  return  to  the  current  left  margin 

%c 

same  as  %o,  but  either  all  or  no  %c 

in  a  group  are  taken 

%{ 

beginning  of  an  unparsing  group 

%} 

end  of  an  unparsing  group 

%[ 

same  as  %t%{ 

%] 

same  as  %}%b 

%S (style-name 

enter  the  named  style 

%S) 

revert  to  the  previous  style 

%% 

display  a  % 

Table  1.  SSL  Display  Formatting  Commands. 


The  unparsing  rules  for  the  PSDL  subset  presented  earlier  are  shown  in  Figure  17. 
Notice  that  whether  a  phylum  is  selectable  is  determined  by  its  LHS  occurrence.  Also  notice 
some  consistency  was  maintained  with  respect  to  placement  of  formatting  commands;  whether 
at  the  beginning  of  the  appropriate  line  or  the  end  of  the  preceding  line. 

All  of  keywords  or  phrases  that  were  identified  in  the  PSDL  grammar  seemed  to 
disappear  in  the  other  rules.  Here,  however,  they  have  returned  and  are  displayed  in  the 
appropriate  places. 

One  last  thing  to  note  is  the  specification  for  a  data_type  where  the  user  is  now  notified 
about  “duplicate_id_msg”  errors.  The  string  variable,  “duplicate_id_msg”,  is  always  displayed 
at  the  Data  production.  The  difference  is  that,  if  an  error  exists,  the  string  variable  will  contain  a 
message  stating  that  fact,  and  if  an  error  does  not  exist,  the  variable  string  wiU  be  a  nuUstring. 
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prototype 

:  Prot 

psdl_components  1 

:  PsdlNil 

[©:] 

1  PsdlPair 

component 

:  ComponentNull 

[  ^ %n  [  component  ]  "  ] 

1  Op 

[ ^ " %nOPERATOR 

1  Data 

[^:"%nTYPE  duplicate_id_msg 

operator_spec 

:  OpSpec 

[ ^ " %nSPECIFICATION%  t " ^ “ %b%nEND " ] 

t:ype_spec 

:  TypeSpec 

[^: "%nSPECIFICATION%t"^“%b%nEND“ ] ; 

optional_interface_list 

:  InterFaceNil 

[@:] 

1  InterFaceList 

[©:^[]@] ; 

interface 

:  InterfaceNull 

[@: :="<interface>" ] 

1  Interface 

7 

attribute 

:  EmptyAttr 

[^:  '‘%n{ interface} "  ] 

!  Input 

I ^ " %nINPUT%n% t " ^ " %b “ ] 

1  Output 

[ ^ " %nOUTPUT%n%t " ^ " %b" ] 

optional_requirements 

:  ReqmtsTraceNone 

[©:] 

1  ReqmtsPrompt 

[ © : " %n{ requirements } " ] 

1  ReqmtsTrace 

[©:  •'%nBY  REQUIREMENTS%t%n'‘ ^  "  %b"  1  ; 

type_decl 

:  TypeDecl 

[AjAH  .  «AJ 

optional_type_declaration 

:  OptTypeDeclNull 

" %n{optional  type  declaration}"] 

1  OptTypeDecl 

[©:“%n"A"  :  "aj. 

id  list 

:  IdNil 

[^:"<identifier"] 

i  IdPair 

id 

:  IdNull 

[©: : ="<identif ier>“ ] 

1  Id 

Figure  17.  Unparsing  Rules  for  Abstract  Syntax. 


4.  Transformation  Rules 

Transformation  rules  allow  for  the  restructuring  of  objects.  While  transformations  can 
include  various  kinds  of  computations,  this  section  will  focus  on  the  more  general  case  of 
template  insertion.  This  can  only  happen  when  the  selection  is  a  placeholder.  The  format  of  a 
typical  template  insertion  is  as  follows. 

transform  phylum  on  transformation  name  pattern  :  expression; 
where: 

transform  is  a  keyword  identifying  a  transformation, 

phylum  identifies  the  phylum  that  this  transformation  can  be  done  on, 

on  is  another  keyword, 

transformation_name  is  the  descriptive  identifier  in  the  help  window  which  the 
user  selects  with  the  left  mouse  to  activate  the  transformation. 
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pattern  is  either  the  same  as  the  phylum  or  some  appropriate  sub-phylum,  and 
expression  is  the  template  that  is  inserted  where  the  pattern  was. 

The  transformation  rules  for  the  PSDL  subset  is  displayed  in  Figure  18. 


transform  component 
on  "type* 

<component>  : 

Data(<id>,<type_spec>) , 
on  "operator" 

<componGnt>  : 

Op{<id>,<operator_spec>) ; 

transform  attribute 
on  " input " 

<attribute>  : 

Input (< input >, <optional_requirements>) , 
on  "output" 

<attribute>  : 

Output {<output>.<optional_requiremGnts>) ; 

transform  optional_requirements 
on  "enter_requiremGnts" 

<optional_requirements>  ; 

ReqmtsTrace (<id_list>) ; 

transform  optional_type_declaration 
on  " enter_declaration" 

<optional_type_declaration>  : 

OptTypeDecl {<id_list>, <type„name>) ; 


Figure  18.  Transformation  Rules  for  Abstract  Syntax. 


5.  Concrete  Rules 

The  concrete  rules,  or  concrete  input  syntax,  is  needed  to  provide  the  editor  with  the 
ability  to  do  text  input  and  to  load  a  pre-existing  program  into  the  editor. 

It  allows  for  text  editing  by  parsing  and  then  translating  the  string  to  the  corresponding 
term  of  the  abstract  syntax.  While  the  subterm  is  being  edited,  it  can  be  any  string.  Once  the  user 
attempts  to  move  to  a  different  part  of  the  structure,  it  is  parsed.  If  syntactically  correct,  it 
replaces  the  term  in  the  abstract  syntax.  If  it  is  not  correct,  the  cursor  is  positioned  at  the 
beginning  of  the  string  and  an  error  message  is  displayed. 

It  allows  for  editing  existing  programs  by  specifying  mies  that  build  a  tree  stmcture 
coinciding  with  the  abstract  syntax  rules  previously  defined.  This  means  that  as  a  minimum,  the 
concrete  mles  must  specify  a  phylum  in  the  input  syntax  to  be  associated  with  all  phylum  of  the 
abstract  syntax  which  are  to  be  edited  as  text.  If  pre-existing  programs  are  to  be  re-edited,  the 
whole  language  must  be  supported. 
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There  are  several  parts  to  the  concrete  rules,  most  of  which  is  similar  to  what  has  already 
been  covered  above.  The  rules  include  attribute  declarations  which  have  a  form  such  as: 

phylun_name  {type_attribute  attributejphylum  attribute_naine}; 

where: 

phylum_name  is  a  phylum  within  the  input  grammar, 
type_attribute  is  either  synthesized  or  inherited, 

attribute_phylum  is  the  attributes  type  and  can  be  built-in  or  used  defined, 
attribute_name  is  any  valid  identifier. 

Entry  declarations  are  required  to  create  a  correspondence  between  the  entry  points 
within  the  input  syntax  and  the  appropriate  selection  within  the  abstract  syntax.  Their  format  is 
as  follows: 

p  ~  P.t; 

where: 

p  is  a  phylum  such  that  the  current  selected  component  is  of  that  phylum,  and 
P  is  an  input  phylum  such  that  the  input  is  parsed  to  see  if  it  is  of  that  phylum,  and 
t  is  a  synthesized  attribute  that  if  the  input  is  of  phylum  P,  is  used  to  replace  the 
current  selected  component  [Ref.  13].  In  other  words,  if  the  two  phylums  match,  the  attribute 
goes  in  the  derivation  tree. 

The  input  syntax  must  have  tokens,  so  there  are  also  lexemes  in  the  concrete  rules.  There 
is  one  mle  for  each  keyword  or  token.  All  white  space  is  ignored  during  the  parsing  of  the  input 
program.  The  format  of  a  lexical  phylum  declaration  is  the  same  as  for  the  abstract  syntax  rule. 
For  convenience,  it  is  repeated  below. 

phylum-name  :  lexeme-name  regular-expression  ; 

Last,  but  certainly  not  least,  is  the  productions  of  the  input  grammar  or  parsing 
declarations.  A  slight  difference  from  what  was  explained  previously  is  the  use  of  the  $.  In  this 
context,  the  phylum  appended  with  $1  means  the  first  occurrence  and  $2  is  the  second 
occurrence,  and  so  on.  The  productions  of  the  input  syntax  can  be  ambiguously  specified  in 
which  case  there  must  be  disambiguating  precedence  rules.  The  general  form  is  shown  next. 
phylum_name  ::=  (phylum_token_comb)  {LHS  =  RHS;} 

where: 

phylum_name  is  self  explanatory. 
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::=  is  the  symbol  to  separate  the  LHS  phylum  name  from  the  RHS  symbols, 
phylum_token_comb  is  a  phylum,  token,  or  a  combination  of  both  which  is 

parsed, 

LHS=RHS  is  the  assignment  of  some  value  to  the  attribute  of  the  phylum_name. 

On  the  following  page  is  Figure  19,  which  contains  the  concrete  rules  for  the  subset  of 
PSDL  that  has  been  the  ongoing  base  throughout  this  chapter.  The  use  of  inherited  attributes  was 
not  covered  in  this  section  as  it  is  somewhat  more  detailed.  It  is  covered  extensively  in 
references  [Ref.  13, 15],  however,  for  the  interested  reader.  Also,  the  concrete  rules  for  PSDL  in 
the  CAPS  SDE  do  use  inherited  attributes  to  deal  with  the  fact  that  the  productions  build  lists  in 
reverse  order. 

Hopefully  several  things  have  been  accomplished  in  this  chapter.  First,  the  reader  should 
have  a  better  appreciation  for  how  powerful  the  SynGen  really  is.  Second,  s/he  should  have  a 
little  better  grasp  of  what  PSDL  is  and  how  it  is  structured.  In  the  next  chapter,  a  small  sample 
application  is  introduced.  In  that  section,  particularly  when  dealing  directly  with  SDE,  the  reader 
should  be  continually  reminded  of  the  rules  discussed  in  this  chapter.  Significant  aspects  of  the 
first  four  rules  are  in  that  sample  application.  Everything  shown  to  the  user  was  specified  in  the 
unparsing  rules.  All  warning  and  error  messages  are  defined  and  discovered  within  the  attribute 
rules  and  auxiliary  functions.  All  transformations  in  the  help  window  (bottom)  of  the  SDE  are 
specified  in  the  transformation  rules.  While  not  evident  in  the  sample  application,  bringing  an 
existing  prototype  into  the  SDE  requires  the  concrete  rules.  And  finally,  none  of  the  above  would 
be  possible  without  the  derivation  tree  representation  of  the  prototype  itself,  specified  through 
the  abstract  syntax  rules. 
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/*  Attribute  Declarations 

PROTOTYPE 

PSDL_COMPONENTS 

COMPONENT 

OPERATOR_SPEC 

TYPERS PEC 

OPTIONAL_INTERFACE_LIST 

INTERFACE 

ATTRIBUTE 

OPTIONAL_REQUIREMENTS 

TYPE^DECL 

OPTIONAL_TYPE_DECLARATION 

ID_LIST 

ID 

/*  Entry  Declarations  */ 

prototype 

psdl_components 

component 

operator_spec 

type-_spec 

optional_interface_list 

interface 

attribute 

optional_requirements 

type_decl 

optional_type_declaration 

id_list 

id 

/*  Lexemes  Same  as  before 
/*Parsing  Declarations  */ 
PROTOTYPE 

PSDL_COMPONENTS 


COMPONENT 

OPERATOR'S PEC 
TYPE_SPEC 

OPTIONAL_INTERFACE_LIST 

INTERFACE 


*/ 

{synthesized  prototype  t;}? 

{synthesized  psdl_components  t:}; 
{synthesized  component  t;}; 

{synthesized  operator_spec  t;}; 

{synthesized  type_spec  t;}; 

{synthesized  optional_interface_list  t;}; 
{synthesized  interface  t;}? 

{ synthesized  attribute  t;}; 

{synthesized  optional_requirements  t;}; 
{synthesized  type_deci  t;}; 

{ synthesized  optional_type_declaration  t;}; 
{synthesized  id_list  t;}; 

{synthesized  id  t;}; 

~  PROTOTYPE. t; 

-  PSDL_COMPONENTS.t; 

~  COMPONENT. t; 

-  OPERATOR'S PEC. t; 

~  TYPE_SPEC.t; 

~  OPTIONAL_INTERFACE_LIST . t ; 

-  INTERFACE. t; 

-  ATTRIBUTE. t; 

-  OPTIONAL^REQUIREMENTS . t ; 

~  TYPE^DECL.t; 

~  OPTIONAL_TYPE_DECLARATION . t ; 

ID^LIST.t; 

-  ID.t; 

and  not  specified  again.  */ 

: : =  { PSDL_COMPONENTS ) 

{ PROTOTYPE. t  =  PSDL_COMPONENT.t; } 

: : =  ( COMPONENT  PSDL_COM PON ENTS ) 

{ PSDL_COMPONENT . t= { COMPONENT . t : : PsdlNil ; } 
I  (COMPONENT  PSDL^COMPONENTS) 
{PSDL_COMPONENTS$l.t  = 

(COMPONENT. t : : PSDL_COMPONENTS$2 . t ) ; } 


::=  0 


0 


{ COMPONENT. t  =  ComponentNull; } 

("TYPE"  ID  TYPE_SPEC) 

{COMPONENT. t  =  (DatadD.t,  TYPE_SPEC . t )  )  ;  } 
("OPERATOR"  ID  OPERATOR_SPEC ) 

{ COMPONENT . t=  ( Op ( ID . t ,  OPERATOR_SPEC . t ) ) ; } 
("SPECIFICATION"  INTERFACE_LIST  "END") 
{OPERATOR_SPEC.t  =  INTERFACE_LIST.t ; } 
("SPECIFICATION"  TYPE_DECL  "END") 

{TYPE_SPEC.t  =  TYPE_DECL . t ; } 

() 

{OPTIONAL_INTERFACE_LIST. t=  InterfaceNil ; } 

( INTERFACE  OPTIONAL_INTERFACE_LIST) 
{OPTTIONAL_INTERFACE_LIST$l.t  = 

( INTERFACE . t : : OPTIONAL_INTERFACE_LIST$2 . t ) ; } 


ATTRIBUTE 

OPTIONAL_REQUIREMENTS 

TYPE_DECL 

OPTIONAL_TYPE„DECLARATION 

ID_LIST 

ID 


{ INTERFACE. t  =  Inter faceNull ; } 
(ATTRIBUTE) 

{ INTERFACE . t  =  ATTRIBUTE . t ; } 

(ATTRIBUTE  OPTIONAL_REQUIREMENTS ) 
{INTERFACE.t  =  Interface ( INTERFACE. t, 
OPTIONAL_REQUIREMENTS.t)  ; 
("INPUT"  TYPE_DECL) 

{ATTRIBUTE. t  =  Input (TyPE_DECL . t ); } 
("OUTPUT"  TYPE_DECL) 

{ ATTRIBUTE . t  =  Output ( TYPE_DECL . t ) ; } 


:=  () 


{ OPTIONAL_REQUIREMENTS . t  =  OptReqTraceNull ; } 
(ID_LIST) 

{OPTIONAL_REQUIREMENTS.t  =  ID_LIST.t;} 
(ID_LIST  ":"  ID) 

{TYPE_DECL.t  =  TypeDecl (ID_LIST. t,  ID.t;} 


:=  () 


{OPTIONAL_TYPE_DECLARATION.t  =  OptTypeDecNull ; } 
(ID_LIST  ID) 

{TYPE_DECL.t  =  TypeDecl(ID_LIST.t,  ID.t;} 


::=  () 


{ID_LIST.t  =  IdListNil;} 

(ID  ID_LIST$1) 

{ID_LIST.t  =  ID.t: :ID_LIST$2.t;} 

{) 

{ID.t  =  IdNull;} 

(IDENTIFIER) 

{ID.t  =  Id( IDENTIFIER) ; } 


Figure  19.  Concrete  Rules  For  Abstract  Syntax. 
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IV.  SYNTAX-DIRECTED  EDITOR  (SDE) 

As  discussed  in  the  previous  chapter,  the  SDE  is  an  editor  tailored  to  PSDL  so  that  it  can 
assist  the  user  in  writing  correct  programs.  The  power  of  such  a  tool  is  immense  and  previous 
work  combined  with  the  work  of  this  thesis  have  only  begun  to  tap  its  potential.  Because  the 
focus  of  this  thesis  is  on  the  SDE,  it  will  be  covered  somewhat  extensively  here. 

This  chapter  will  cover  creating  an  example  prototype  with  the  SDE,  the  constraint 
checking  functionality  that  is  to  be  added  to  the  SDE,  the  actual  modifications  to  implement  that 
additional  functionality  and  finally,  an  example  with  the  modified  editor. 

A.  EXAMPLE  OF  SDE 

1.  Simple  Tutorial 

This  section  will  provide  you  with  the  minimal  tools  necessary  to  perform  software 
development  through  rapid  prototyping.  Your  attention  will  be  focused  on  the  PSDL  Editor 
consisting  of  three  separate  parts;  the  Syntax  Directed  Editor  (SDE),  the  Graph  Viewer  and  the 
Graphic  Editor. 

These  three  parts  taken  together  allow  the  designer  to  create  the  CAPS  data  flow 
diagram  and  PSDL  program.  They  further  allow  assignment  of  all  timing  and  control  constraints 
to  prototype  components  which  consist  of  operators  and  data  streams.  For  a  more  detailed 
presentation,  see  the  CAPS  Tutorial. 

To  start  CAPS,  you  simply  t5^e  “caps”.  This  will  start  it  up  in  the  designer  mode.  LFsing 
the  switch  “-m”  allows  CAPS  to  be  started  up  in  the  manager  mode.  We  will  not  use  that,  as  it  is 
beyond  the  scope  of  this  example.  All  of  the  work  that  is  generated  under  CAPS  is  saved  in  a 
“.caps”  directory  which  is  directly  under  your  Home  directory.  If  you  do  not  have  it,  CAPS  will 
create  it  for  you.  The  current  version  of  CAPS  not  only  creates  the  “.caps”  directory,  if  you 
don’t  have  it,  but  it  also  copies  two  sample  prototypes  into  it.  One  of  these  is  the  one  you  are 
about  to  create.  Therefore,  to  avoid  this  potential  problem,  if  you  don’t  have  a  “.caps”  directory, 
create  your  own.  The  results  of  this  section  will  produce  a  design  that  looks  like  Figure  20. 
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Figure  20.  Temp_ControHer  Prototype  displayed  in  Graph  Viewer. 

As  soon  as  you  start  CAPS,  you  will  see  an  interface  like  that  shown  in  Figure  21. 


Figure  21.  The  CAPS  User-Interface  (Designer  Mode). 


To  select  a  prototype  that  already  exists,  you  simply  select  “Choose”  from  under  the  "Pro¬ 
totype"  menu,  and  the  available  protot5'pes  will  be  displayed  for  you  to  select  from.  That  only 
selects  the  prototype.  You  must  then  select  “PSDL”  from  under  the  ’’Edit”  pull  down  menu  to 
invoke  the  SDE. 

To  start  a  new  prototype,  puU  down  the  “Protot5^e”  menu  from  the  CAPS  designer  mode 
screen  and  select  “New”.  Do  that  now  and  the  window  displayed  in  Figure  22  will  appear. 


Figure  22.  New  Prototype  Window. 


Left  click  the  prototype  name  box  which  will  cause  it  to  become  highlighted.  Enter 
TEMP_CONTROLLER  and  left  click  your  mouse  on  the  OK  button.  You  must  use  the  mouse  to 
activate  the  name  box  and  acknowledge  ok  when  finished.  A  <retxun>  will  not  work  here.  In  addi¬ 
tion,  CAPS  is  case  sensitive  because  the  underlying  file  structure  is  based  on  UNIX.  Identifiers  of 
two  words  or  more  must  be  connected  by  an  underscore.  When  you  do  this,  two  windows  will 
open  up  as  shown  in  Figure  23. 


CAPS-Onds  File  Edit  View  Tools  Options  Structure  Text  Help 


New  file  TEMP_CONTROLUER.psdl 


OPERarOR  TEMP  CONTROLLER 


UaRNINGS,  ERRORS  AND  ALERTS: 


—  This  Is  A  Root  Operator 


SPECIFICATION 

END 

IHPLEHENTATION 


< declarations > 

< control  constraints > 
END 


Context:  graph 


Figure  23.  PSDL  Syntax  Directed  Editor  (SDE)  and  Graph  Viewer. 

Notice  that  the  initial  root  operator  in  the  SDE  is  the  same  as  the  name  that  you  provided 
in  the  new  prototype  selection.  TEMP_CONTROLLER  is  entered  as  a  Stub  in  the  SDE  and  acts 
as  the  operator  for  the  total  prototype.  Also,  the  Graph  Viewer  is  empty  as  we  have  not  started  to 
graph  the  prototype  yet.  That’s  next. 


All  of  the  pull-down  menus  in  the  SDE  are  active,  however  all  of  the  necessary  commands 
for  PSDL  editing  and  file  saving  are  found  in  the  “CAPS-Cmds”  pull  down  menu.  Do  not  use  the 
“file”  pull-down  menus,  because  if  you  do  SDE  will  not  save  a  correct  PSDL  program. 

From  the  SDE,  invoke  the  CAPS  Graphic  Editor  by  using  the  “edit  graph”  command  from 
the  “CAPS-Cmds”  pull-down  menu.  Figure  24  wiU  appear. 


Figure  24.  The  CAPS  Graphic  Editor. 

Once  in  the  Graphic  Editor,  the  designer  draws  the  data  flow  diagram,  enters  operator 
names,  inserts  input  and  output  streams,  and  enters  some  of  the  prototype  timing  information. 
Additional  timing  and  control  constraints  are  entered  and  implementation  options  are  selected  in 
the  SDE.  That  will  be  covered  after  you  complete  the  graph  of  the  prototype. 

The  CAPS  Graphic  Editor  is  used  first  and  foremost  to  lay  out  the  data  flow  design  of  a  pro¬ 
totype.  Operators  are  linked  together  with  data  streams  and  given  names.  Context  sensitive 
attributes  are  assigned  to  operators  and  data  streams.  These  attributes  are  the  maximum  execution 
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time  (MET)  for  operators  and  latency  (LAT)  for  data  streams.  Recal  that  the  MET  is  the  maxi¬ 
mum  amount  of  CPU  time  the  operator  can  use  for  execution  and  the  latency  of  a  data  stream  is  a 
lower  bound  on  the  amount  of  time  required  for  transmission  of  data  along  that  stream.  The  fig¬ 
ures  and  words  that  appear  on  the  left  hand  side  of  the  Graphic  Editor  (the  Graphic  Editor  palette) 
are  editing  tools. 

The  functionality  of  the  tools  are  summarized  as  follows: 

CIRCLE . Draw  circular  operators  to  represent  proposed  software  components, 

SQUARE.. .Draw  rectangular  operators  to  represent  simulations  of  external  systems, 
LINE . Draw  data  streams, 

Properties...Assign  properties  to  the  selected  operator  or  data  stream. 

Select . Enable  selection  of  an  object  in  the  graph. 

The  name  of  the  active  tool  is  displayed  in  the  lower  left  portion  of  the  Graphic  Editor  and 
the  name  of  the  operator  being  edited  is  displayed  in  the  lower  right  portion. 

Begin  by  putting  in  the  software  operators  for  the  TEMP_CONTROLLER  prototype. 
Select  the  Circle  Tool,  or  software  operator  palette,  and  left  click  your  mouse.  Now  move  your 
mouse  cursor  into  the  working  area  and  left  click  again.  A  circle  will  appear.  Make  six  more  by 
simply  left  clicking  in  six  separate  places  so  that  your  graph  looks  something  like  that  of  Figure 
25. 
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Figure  25.  Too  many  software  operators. 

Whoops,  you  should  only  have  four  circles  in  your  graph.  You  can  delete  some  of  them 
with  the  select  tool!  With  your  mouse,  left  click  on  the  Select  tool.  Now  move  the  mouse  to  a  cir¬ 
cle  and  left  click  again.  The  circle  that  you  selected  will  be  framed  by  square  reference  points.  To 
delete  the  circle,  press  the  delete  key  or  backspace  key  on  your  keyboard.  To  select  another  object, 
simply  move  the  mouse  onto  another  circle  and  left  click  again. 

You  can  also  move  and  resize  objects  within  your  working  space  with  the  use  of  the  select 
tool.  Simply  left  click  on  the  Select  tool  and  then  left  click  on  the  object  you  want  to  move  or 
modify.  Once  you  have  left  clicked  on  the  select  tool  you  can  also  make  another  object  active  by 
clicking  on  it  without  hitting  the  select  button  again.  By  depressing  the  left  mouse  button  while  on 
an  object,  and  then  moving  the  mouse,  you  can  drag  the  object  to  where  you  want  to  place  it. 
When  you  reach  the  point  where  you  wish  to  place  it,  simply  stop  dragging  the  mouse  and  release 
the  left  mouse  button.  In  the  case  of  re-sizing,  simply  left  click  one  of  the  reference  points  after 
selecting  the  object  and  move  the  mouse,  letting  go  of  the  bottom  when  the  object  is  as  desired. 

To  label  your  software  operators,  click  on  the  Select  tool,  select  an  object,  and  then  click 
on  the  Properties  tool.  This  will  bring  up  the  Properties_popup  window  seen  in  Figure  26. 
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Figure  26.  Properties  Box  for  Operators. 


Click  in  the  Operator  Name  box  and  type  its  name.  Then  click  in  the  next  box  or  hit  the  tab 
key  to  enter  the  MET  information,  if  desired.  Now  click  “OK”  or  hit  the  <enter>  or  <Retum>  key. 
The  units  of  milliseconds  (ms)  are  automatically  appended  to  the  number  entered  in  the  Properties 
popup  dialog  box.  If  you  enter  units  while  in  the  Properties  popup  dialog  box,  your  max  execution 
times  will  not  appear  on  the  graph. 

The  TEMP_CONTROLLER  prototype  with  all  software  operators  labeled  should  appear 
similar  to  Figure  27  below. 


Max  execution  time  labels  can  be  selected  and  moved  like  all  other  units.  Be  careful  that 
you  do  not  misplace  them  however,  as  the  object  they  refer  to  should  be  obvious  by  their  place¬ 
ment. 

Next  you  will  use  the  Line  tool  to  enter  data  streams  between  objects.  Move  your  mouse 
to  the  Line  tool  palette  and  left  click.  To  start  the  stream,  place  the  cursor  in  an  object  and  left 
click.  To  end  the  stream,  move  the  mouse  to  another  object  and  left  click  again.  Data  Streams  can 
originate  or  terminate  in  an  object  or  outside  of  an  object  if  they  are  external  input  or  output.  To 
start  or  end  a  stream  outside  of  an  object,  double  click  the  left  mouse  button.  If  curved  lines  are 
needed,  create  way  points  along  the  line  by  clicking  the  left  mouse  as  you  proceed  to  the  termina¬ 
tion  point  of  the  stream.  When  the  line  is  completed  it  will  curve  to  conform  with  the  way  points. 
Figure  28  shows  the  TEMP_CONTROLLER  prototype  with  data  streams  entered. 


Figure  28.  TEMP_CONTROLLER  with  Data  Streams  entered. 


The  data  streams  have  properties  similar  to  the  other  objects  in  that  they  have  object 
names  and  a  latency  attribute.  The  Properties_popup  for  data  streams  is  shown  in  Figure  29. 
Again,  the  latency  attribute  is  measured  in  ms  by  default.  The  functional  restrictions  pertaining  to 
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data  entry  for  this  window  are  the  same  as  in  the  Properties_popup  for  operators.  Note  that  the 
editor  is  smart  enough  to  call  up  the  right  Properties_popup  box. 


Figure  29.  Properties  Box  for  Data  Streams. 


The  data  stream  popup  box  allows  for  indicating  whether  the  data  stream  is  a  state  stream 
or  non-state  stream.  These  are  optional  and  have  not  been  entered  here.  In  the  graphics  editor,  the 
default  is  non-state  stream.  In  this  edition  of  CAPS  Release  1,  the  state  streams  are  defined  in  the 
SDE.  For  more  details  on  data  streams,  refer  back  to  chapter  two. 

Data  stream  labels  can  be  moved  like  other  objects  by  using  the  Select  tool  and  then  drag¬ 
ging  with  the  mouse.  If  a  data  stream  name  or  latency  label  is  deleted  the  entire  data  stream  is 
deleted  as  well.  If  a  stream  must  be  modified  (i.e.  rename  it  or  change  its  latency  time),  it  should 
be  done  through  the  Properties_popup  box. 

The  prototype  data  flow  graph  is  complete  and  there  is  little  left  to  do  in  the  graphic 
model.  We  will  now  open  up  the  SDE.  To  return  to  the  SDE  firom  the  Graph  Editor,  drop  the 
“Graph”  menu  on  the  menu  bar  and  select  “Return  to  SDE”.  The  Graphic  representation  of  your 
prototype  will  be  saved  automatically.  With  the  possible  exception  of  “Decompose”,  which  will 
be  discussed  later,  the  other  choices  on  both  menus  are  self-explanatory. 

The  first  thing  you  should  notice  when  you  return  to  the  PSDL  Editor  (See  Figiue  30)  is 
that  stubs  have  been  created  (in  alphabetical  order)  for  all  of  the  data  streams  that  you  created  in 
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the  Graph  Editor.  Stubs,  in  the  form  of  Control  Constraints,  have  also  been  entered  for  all  Opera¬ 
tors  that  you  created.  These  too  are  in  alphabetical  order. 


Figure  30.  PSDL  Editor  after  Graph  is  complete. 
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Once  in  the  editor,  you  can  use  the  mouse  to  move  the  cursor,  which  appears  as  a  caret,  or 
you  can  move  it  with  the  arrows  on  your  keyboard.  When  you  move  the  cursor  to  the  end  of 
“SPECIFICATION”,  the  menu  in  Figure  31  appears  at  the  bottom  of  the  editor.  Some  of  these 
selections  are  input  via  the  Graph  Editor,  i.e.,  o_inputs_list,  o_outputs_list  and  o_timing_info. 
You  can  enter  these  things  in  the  SPECIFICATION,  but  if  the  information  that  you  enter  is  incon¬ 
sistent  with  that  entered  in  the  Graph  Editor,  the  SDE  will  change  it  to  make  it  consistent.  Most 
important  to  remember  is  that  the  cursor  is  context  sensitive  and  menus  will  automatically  open 
based  on  where  the  cursor  is  placed.  You  will  also  know  what  part  of  the  prototype  is  currently 
selected  by  the  underlining  that  SDE  inserts. 


CdnteKl:  Dpera1or_st)ec  Q 


kEyVfiDHlS 


ojnputsjist  I  ojiJtjpiitsJist. 


o_famwJ_descs  I  d  jaiericsjst 


D_e;«eptjorisJjst 


Operaior 


Figure  31.  Specifications  Tool  Bar. 

Since  we  are  in  the  top  level  of  the  editor,  the  only  things  that  we  will  enter  into  the  SPEC¬ 
IFICATION  are  key  words.  Select  “o_keywords”,  which  stands  for  optional  keywords;  the  “o”  in 
all  of  these  options  stand  for  optional.  The  next  display  should  look  like  that  of  Figure  32. 


I  Ctmtest;  o_keywanla 


excpptiDnsjist  I  atiningtira 


|o_genEricaJfot| 

1  oJnpMtsJist  1 

1  [i_Cil.J<|)Ut3_list 

h 

3tate3 i3t 

Kfiyworris 


Figure  32.  Keyword  Tool  Bar. 

Note  that  the  context  of  the  cursor  position  now  changes  from  operator_spec  to 
o_keywords.  When  the  Keywords  Tool  Bar  opens,  the  SPECIFICATION  section  of  your  PSDL 
editor  will  change.  A  place  holder  wUl  appear  in  the  form  of  square  []  or  angel  brackets  <>.  Any 
time  you  see  square  brackets,  information  placed  inside  of  them  is  optional.  The  actual  insertion 
under  the  SPECIFICATION  line  should  be  “roptional  kevwordsi”.  Click  on  the  Keywords  option 
in  the  Keyword  Tool  Bar  and  the  Q  will  be  replaced  by  <identifier>.  You  are  now  ready  to  enter  in 
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Keywords.  Hit  the  return  key  after  each  keyword  (commas  will  be  inserted).  Multi-word  key¬ 
words  can  be  separated  by  underscores.  When  you  are  finished  you  must  hit  return  twice.  This 
will  save  your  entries. 

If  you  make  mistake,  you  can  back  space  over  incorrect  text  just  entered  or  you  can  high¬ 
light  (click  of  left  mouse)  that  section  of  the  prototype  to  be  deleted  (recall  it  will  be  underscored). 
Then  hit  <ctrl>  <shift>  <k>  simultaneously.  If  you  have  an  optional  empty  place  holder  you  can 
eliminate  it  by  moving  the  cursor  up  with  the  arrow  key  or  by  clicking  elsewhere  with  the  left 
mouse  button. 

Other  items  that  you  can  add  to  the  SPECIFICATION  are  informal  descriptions  and 
STATE  DECLARATIONS.  The  informal  descriptions  will  appear  in  { }  and  are  similar  to  user/ 
programmer  comments  in  other  programming  language.  They  are  for  human  consumption  only 
and  are  ignored  by  the  PSDL  compiler.  The  State  Declarations  are  necessary  to  specify  Data 
Streams  that  require  initial  values. 

You  can  look  at  the  graph  at  anytime  by  clicking  in  the  PSDL  where  there  is  mention  of 
the  graph  components.  For  example,  positioning  the  cursor  at  the  “OPERTOR 
TEMP_CONTROLLER”  or  below  will  bring  up  the  graph  at  the  top  level  (the  only  level  at  the 
current  time).  The  Graph  \fiewer  will  come  up  automatically.  If  the  graph  viewer  window  is 
closed  (or  minimized),  it  will  be  labeled,  “graph_edit”.  Do  not  be  confused  by  this  as  it  is  still  the 
graph  viewer. 

Now  enter  the  declaration  types  for  the  data  streams.  Position  the  cursor  before,  in,  or  after 
the  <decl_type_name>  component  of  the  DATA  STREAM.  A  subtle  requirement  of  the  SDE 
should  be  mentioned  here.  When  entering  information  applying  to  streams  and  control  constraints 
of  operators,  you  must  enter  them  into  the  parent  of  the  operator  or  stream.  Left  Click  the  place 
holder  specified  above  and  a  menu  bar  of  standard  defined  types  wiU  activate  at  the  bottom  of  the 
PSDL  Editor.  Click  on  the  type  declaration  “FLOAT”  and  that  data  stream  will  be  defined  for  that 
t3^e.  Now  do  the  other  two.  Actually,  you  would  pick  which  ever  type  makes  the  most  sense  for 
your  design.  User  defined  types  can  also  be  accessed  from  this  menu  bar  and  typed  in  by  the  user 
but  that  is  outside  the  scope  of  this  guide. 

More  important  however  is  the  propagation  of  type  declarations  throughout  the  PSDL  pro¬ 
gram  when  you  define  the  data  streams.  Once  you’ve  selected  the  types  for  these  three  streams 
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within  the  parent  operator,  you  merely  left  click  anywhere  else  and  the  new  declarations  are  prop¬ 
agated  throughout  the  prototype  as  shown  in  Figure  33  below. 


CflPB-Cnds  File  Edit  Vieu  Tools  Options  Structure  Text 


NeH  rUe  TDfl>_C()NTROLUER.psdl 


OPIRATOR  Cooler 
SPECIFICATION 
IHPDT 

Cool  Signal 

Din 
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FLOAT 


OPERATOR  Evaluate JIciiip 
SPECIFICATIOH 
INPUT 

Teiaperature 
OUTPUT 
Cooi_Signal 
Heat_Signal 

yaznoi  execution  time  200 

END 

<operator  inple]ieiitation> 

OPERATOR  Heater 
SPECIFICAnON 
INPUT 

Heat^Signal  :  FLOAT 
END 
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OPERATOR  Sensor 
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CONTROL  CONSmmTS 
OPERATOR  Cooler 
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These  updates  must  be  made  within  the 


upd; 

parent  Operator  (TEMP_CONTROLLER) 
IMPLEMENTATION  so  that  the 
changes  are  propagated  correctly. 


OPERATOR  EvaluateJCeiap 
OPERATOR  Heater 
OPERATOR  Sensor 


Figure  33.  Complete  PSDL  Program  showing  Type  Declaration  propagation. 

Also  illustrated  in  Figure  33  is  the  PSDL  Editor’s  ability  to  correctly  assign  data  streams 
as  either  input  or  output  within  the  Operator  Specifications  found  in  the  top  of  PSDL  program. 
The  Maximum  Execution  Times  that  you  entered  in  the  Graphics  Editor  are  displayed  there  as 
well. 

Control  Constraints  can  be  modified  directly  from  the  PSDL  Editor  by  using  the  mouse  or 
arrow  keys  as  previously  mentioned.  While  in  the  graphics  editor,  two  processes  (Sensor  and 
Evaluate_Temp)  were  deemed  as  time-critical  and  were  given  MET’s.  At  this  point,  it  must  be 
decided  whether  they  are  periodic  or  sporadic  operators.  Suppose  we  decide  that  both  should  be 
periodic  and  that  the  constraints  are  as  follows:  PERsengor  =  190ms,  PEREvaiuate.Temp  =  210ms, 
FWsensor  =  185ms,  and  finaUy  FWEvaluate_Temp  =  205ms. 
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In  order  to  accomplish  this,  we  first  left  click  just  past  the  control  constraint  we  wish  to 
edit;  “Sensor”.  Then  the  menu  bar  at  the  bottom  of  SDE  changes  to  that  shown  in  Figure  34.  You 
click  on  “optional_period”,  and  then  the  menu  in  Figure  35  appears.  Click  “Optional_Period”  and 
the  operator  “Sensor”  has  its  first  constraint  under  it.  You  do  the  same  procedure  for  entering  the 
time  (not  shown  here);  i.e.  left  click  “'Iime_Expression”,  enter  an  integer  for  the  placeholder 
(should  be  190),  hit  return,  select  the  desired  units  from  the  menu  bar,  and  finally  click  where  you 
want  to  go  next. 


constraints  I  optional  jrigger 
iiicp  I  optional  jiirt.  I  oiit|nit._( 

tjiiier_operatlDns 


Figure  34.  Control  Constraints  Menu  Bar. 
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Context:  id 
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Optional_Perioti 


optionaltrigger 


|  operaterjdjiairs 


Figure  35.  Optional  Period  Menu  Bar. 

After  you  enter  in  the  constraints  for  the  two  time-critical  operators,  your  PSDL  should 
look  like  that  pictured  in  Figure  36. 
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CAPS-Cmds  File  Edit  View  Tools  Options  Structure  Text 
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END 
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SPECIFICATION 
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END 
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SPECIFICATION 

END 
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DATA  STREAM 
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CONTROL  CONSTRAINTS 
OPERATOR  Cooler 

OPERATOR  EvaluateJTemp 


Figure  36.  Complete  PSDL  Program  with  Control  Constraints. 

But  what  if  we  wanted  to  decompose  one  of  our  operators?  Recall  the  CAPS  prototyping 
process  from  chapter  two.  When  you  have  a  component,  you  first  look  to  see  if  it  can  be  imple¬ 
mented  with  a  component  from  the  software  base.  If  not,  it  must  be  determined  whether  the  oper¬ 
ator  should  be  decomposed.  If  yes,  you  will  go  through  the  same  thought  process  just  described  to 
specify  the  sub-components  of  the  operator.  When  dealing  with  operators  that  should  not  be 
decomposed,  they  must  be  implemented  by  hand  (currently  requires  Ada  implementation).  So 
then,  the  question  here  is  how  to  decompose  an  operator. 

First  select  “edit-graph”  from  the  “CAPS-Cmds”  in  the  SDE  menu  bar.  You  should  get  a 
window  that  looks  like  Figure  28  again. 
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Figure  28.  (Repeated). 

Select  the  Sensor  Operator  and  then  select  “Decompose”  from  the  “Graph”  menu  bar.  It 
will  automatically  open  up  a  Graph  Editor  that  looks  like  Figure  37  below.  The  Graph  Editor 
shows  the  data  stream,  “Temperature”,  as  an  external  output  from  the  Sensor  operator.  This  is 
information  that  you  need  to  keep  in  mind  as  you  decompose  the  Sensor.  It  must  be  maintained 
for  consistency  and  is  brought  forward  so  that  the  user  does  not  have  to  look  back  at  the  parent 
operator. 
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Figure  37.  Operator  Sensor  after  initially  selecting  decompose. 


To  decompose  Sensor,  you  draw  the  appropriate  data  flow  diagram  just  as  before.  This 
diagram,  however,  is  the  internal  workings  of  the  composite  operator  “Sensor”.  An  example  is 
given  below  in  Figure  38. 
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Figure  38.  Operator  Sensor  decomposed. 

Now  that  you  are  done  with  the  editor,  you  can  either  go  back  to  the  previous  level  data¬ 
flow  graph  or  return  directly  to  SDE  (choose  to  go  back  up  this  time).  Those  options  are  both 
under  the  “Graph”  pull-down  menu  as  “Edit  Parent”  and  “Return  to  SDE”  respectively.  If  you  go 
back  to  the  top  level  diagram,  you  should  notice  that  the  “Sensor”  operator  is  different  as  shown 
in  Figiure  39.  This  doubled  circle  denotes  that  the  operator  is  composite  and  has  been  decom¬ 
posed. 
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Figure  39.  TEMP_CONTROLLER  Prototype  with  Sensor  marked  as  decomposed. 

The  PSDL  file  in  the  SDE  will  reflect  the  changes  made  and  will  add  new  operators,  exter¬ 
nal  simulators  and  data  streams  as  necessary.  The  declarations  and  control  constraints  for  these 
objects  are  modified  as  previously  described  in  this  guide. 

You  should  now  be  able  to  build  a  prototype  in  the  graphic  editor,  make  type  declarations, 
and  define  control  constraints  in  the  SDE.  The  following  table  provides  a  quick  reference  on 
which  type  of  information  can  be  entered  into  each  editor. 


Graphic  Editor  Information 

Syntax  Directed  Editor  Information 

vertices  &  edges  (operators  &  data  streams) 

operator  names 

data  stream  names 

operator  maximum  execution  time 

data  stream  latency  time 

operator  color  &  shape 

control  constraints 

data  stream  types 

timer  declarations 

state  declaration  &  initialization 

user  defined  types 

operator  &  type  implementation  selection 

Table  2.  Summary  of  editor  inputs. 


If  you  look  back  at  the  complete  PSDL  program  in  Figure  36,  you  will  notice  one  more  set 
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of  placeholders  that  haven’t  been  filled  in.  These  are  for  the  “operator  implementation”.  As  dis¬ 
cussed  earlier,  for  each  component  in  your  design,  you  musfeither  find  a  component  within  the 
software  base  that  can  fill  its  needs,  further  decompose  it,  or  implement  it  in  Ada.  For  instmc- 
tional  purposes  here,  simply  go  to  each  placeholder,  click  on  it,  and  select 
“Ada_Implementation”.  Obviously,  if  this  were  a  real  application,  someone  would  eventually 
have  to  implement  those  atomic  operators.  Once  the  prototype  is  complete,  save  your  work  in  the 
PSDL  Editor  by  “PSDL-Save”  or  “PSDL-Save-Exit”  from  the  “CAPS-Cmds”  button  on  the  menu 
bar.  The  next  step  would  be  to  Translate  the  prototype  to  generate  the  code  that  will  tie  everything 
together.  After  that,  you  would  invoke  the  Scheduler  which  determines  a  schedule  for  the  system. 
And  finally,  it  would  be  compiled  to  create  executable  code.  Don’t  go  any  farther  as  there  are 
problems,  besides  the  fact  that  you  don’t  have  implementations  for  your  operators,  that  will  be 
covered  in  section  C. 

2.  SDE  Menu  Functions 

Because  the  last  section  was  designed  to  be  a  simple  example,  the  menu  of  the  SDE  was 
mostly  excluded  with  the  exception  of  some  of  the  options  under  “CAPS-Cmds”.  Recall  that  the 
“File”  menu  should  not  be  used.  This  section  was  added  because  there  are  several  options  that 
the  designer  should  be  familiar  with.  The  others  can  be  experimented  with  to  get  some  exposure 
as  free  time  dictates. 

Under  the  “Edit”  pulldown  menu  are  several  options  that  most  users  are  already 
accustomed  to.  The  cut,  copy,  paste,  and  delete  are  in  most  editors  today.  The  SDE  is  no 
exception.  This  menu  gives  you  a  choice  of  either  text  or  a  stracture  that  you’ve  already 
highlighted,  and  acts  like  any  other  editor  with  respect  to  use.  Getting  accustomed  to  these  can 
enhance  the  designers  productivity  as  they  speed  development  time. 

The  “View”  pulldown  menu  deals  with  what  representation  of  the  abstract  syntax  tree 
you  wish  to  see.  You  can  select  any  number  of  different  views  or  a  combination  of  them.  While 
this  is  fun  to  experiment  with,  the  default  view  is  the  best  for  the  beginning  designer. 

The  “Tools”  pulldown  menu  is  also  for  a  more  advanced  user.  A  designer  that  is  familiar 
with  the  concepts  of  the  sub-menu  items  below  this  option  will  quickly  grasp  their  intent  as  they 
are  very  common  in  the  Unix  toolset. 

The  “Structure”  pulldown  menu  deals  with  moving  around  in  the  edited  prototype.  Most 
of  this  is  also  accomplished  more  easily  with  the  tab,  space  bar,  and  especially  the  mouse.  The 
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one  option  that  must  be  mentioned,  however,  is  the  “ascend-to-parent”.  Sometimes  the  user  can 
get  confused  as  to  what  part  of  the  abstract  syntax  tree  is  being  displayed  in  the  editor  and  there 
are  times  when  the  structure  highlighted  must  be  walked  back  up  the  tree.  For  example,  when  a 
designer  decides  to  quit  work  on  a  prototype  before  assigning  types  to  the  streams.  Before 
quitting,  the  prototype  would  look  something  like  that  displayed  in  Figure  40  below.  Notice  that 
the  placeholder  says  <decl  type  name>. 


Edit  Vieu  Tools  OpLions  Structure  Text  Help 
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END 
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END 
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OPERATOR  tl 
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END 

IMPLEMENTATION 

GRAPH 
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DATA  STREAM 

SI  :  <decl  type jnajftO  — 

CONTROL  CONSTRAINTS 
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Figure  40.  Data  Stream  without  Type  Declaration. 

If  the  designer  were  to  exit  the  SDE,  saving  the  prototype  without  fully  defining  the 
stream  SI,  the  placeholder  would  be  different  upon  re-editing  the  prototype.  Because  the  SDE 
checks  to  ensure  that  any  prototype  being  loaded  into  the  editor  is  syntactically  correct,  the 
stream  must  be  defined.  To  keep  from  getting  an  error  then,  SDE  puts  an  identifier  in  the 
placeholder.  Now  when  you  open  the  prototype,  you  see  what  is  displayed  in  Figure  41. 
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CflPS-Ctids  File  Edit  View  Tools  Options  Structure  Text  Help 


Figure  41.  Data  Stream  with  changed  Type  Declaration. 


The  designer  may  now  want  to  make  the  stream  an  integer.  Instead  of  indicating  a 
type_decl_name  as  before,  it  shows  the  placeholder  as  an  id.  The  designer  must  select  the  id, 
UNDEFINED  TYPE  NAME,  and  delete  it  using  the  “delete-stracture”  option  in  the  “Edit” 
menu.  This  will  make  the  placeholder  appear  as  <identifier>.  The  next  step  is  to  walk  up  the 
syntax  tree.  This  is  done  by  selecting  “ascend-to-parent”  in  the  “Stmcture”  menu.  After  doing 
that,  you  should  notice  that  the  context  (shown  in  the  Help  Pane  at  the  bottom  of  the  SDE)  now 
shows  the  placeholder  to  be  a  decl_type_name,  which  is  desired.  Delete  the  placeholder  one 
more  time  and  you  are  back  to  what  was  there  before  you  quit.  In  addition,  the  Help  Pane  now 
shows  all  the  available  transformations  for  a  decl_type_name. 

Alternately,  one  can  first  select  the  id,  UNDEFINED_TYPE_NAME,  and  then  “ascend- 
to-parent”  in  the  stmcture  menu,  followed  by  selecting  the  “delete- structure”  option  under 
“Edit”. 

The  “Text”  pulldown  menu  provides  more  ways  of  moving  around,  provides  for  search 
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and  replace  techniques,  and  has  an  undo  option.  And  finally  the  help  is  the  last  pulldown  menu 
but  is  very  limited  in  its  current  implementation. 

Finally,  some  of  the  useful  keystrokes  of  the  editor  are  listed  below.  Recall  that  the 
delete  keystroke  was  covered  earlier  in  the  example. 


Control-Shift-K . Delete  Structure, 

Control-Shift-P . Move  up  one  level  in  the  parse  tree, 

Control-h . Delete  previous  character, 

Control-v . Advance  one  page, 

Control-d . Delete  next  character, 

arrow  keys . move  up,  down,  left,  right, 

delete  or  backspace . Delete  previous  character. 


There  is  no  “undo”  command  in  the  Syntax  Directed  Editor,  so  the  user  must  be  careful. 
If  a  major  problem  occurs  during  editing,  the  best  option  is  to  select  “exit”  from  the  “CAPS- 
Cmds”  pulldown  menu  and  exit  without  saving. 


B.  NEW  FUNCTIONALITY 
1.  Scheduling  Constraints 
a.  General 

All  time-critical  operators  are  non-preemptable  under  the  current  CAPS  model, 
meaning  that  once  they  start,  they  will  run  until  done.  And  as  previously  mentioned,  these 
operators  are  statically  scheduled;  before  runtime.  The  other  operators,  however,  are  preemtable, 
and  are  scheduled  dynamically  at  runtime.  This  means  the  hardest  part  of  ensuring  that  a  real¬ 
time  system  will  run  correctly  is  ensuring  those  time-critical  operators  can  be  scheduled.  Non 
time-critical  operators  simply  use  whatever  time  is  left  during  runtime,  including  the  time  left 
over  when  an  operator  finishes  early.  For  that  reason,  most  of  the  concentration  here  will  be  on 
time-critical  operators. 

Recall  that  when  an  operator  has  a  MET  (maximum  execution  time),  it  is  time- 
critical  and  is  classified  as  periodic  or  sporadic.  The  previous  definition  of  MET,  the  maximum 
amount  of  CPU  time  the  operator  can  use  for  execution,  is  right  on  for  atomic  operators.  In  the 
case  of  composite  operators,  however,  MET  is  defined  a  little  more  loosely  as  the  maximum 
time  needed  along  any  thread  of  control  within  the  operator  itself.  In  addition  to  the  above 
definition,  it  must  be  realized  that  the  MET  encompasses  data  triggering  checks,  stream  reads, 
execution  guard  checks,  execution  of  the  operator,  output  guard  checks,  stream  writes,  and 
exception  handling  [Ref.  11].  Table  3  recaps  the  two  classifications  of  a  time-critical  operator. 
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Periodic  Operators 

Sporadic  Operators 

Maximum  Execution  Time  (MET) 

Period  (PER) 

Finish  Within  (FW) 

Maximum  Execution  Time  (MET) 
Minimum  Calling  Period  (MCP) 

Maximum  Response  Time  (MRT) 

Table  3.  Classifications  of  Real-Time  Operators. 


As  shown  above,  and  previously  discussed  in  chapter  two,  periodic  operators  also 
have  a  PER  (period),  and  a  FW  (finish  within)  time  where  the  PER  depicts  the  frequency  in 
which  the  Scheduler  makes  a  processor  available  for  execution  and  the  FW  denotes  how  long 
from  the  start  of  the  PER  before  execution  must  be  completed.  Figure  42  below  is  provided  to 
help  make  this  concept  a  little  clearer.  The  figure  shows  that  periodic  operators  are  triggered  by 
temporal  events  occurring  at  regular  intervals;  thus  the  PERiod,  which  is  the  span  of  time 
between  two  successive  activations. 


In  addition  to  the  MET,  a  time  constrained  operator  that  is  sporadic  has  a  MRT 
(maximum  response  time)  and  a  MCP  (minimum  calling  period),  where  MRT  refers  to  the 
maximum  amount  of  time  between  the  arrival  of  new  data  on  the  input  data  stream(s)  (which 
triggers  the  operator)  and  the  time  when  the  last  output  is  put  on  the  output  data  streams,  and 
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MCP  refers  to  the  lower  bound  on  the  delay  between  two  subsequent  arrivals  of  triggering  data 
on  the  input.  MCP  is  actually  more  of  a  constraint  on  the  operator(s)  that  produce  a  triggering 
data  stream.  Figure  43  shows  sporadic  operator  constraints  pictorially. 


New 

Data 


time  I 


New 

Data 


Trigger 

Period 


Trigger 

MET 

^Period^ 

r 

MET 

RT<MRT 


MRT 


CP  >  MCP 


MCP 


Activation 

Time 


RT  =  actual  response  time 
CP  =  actual  calling  period 


Figure  43.  Timing  Constraints  for  the  Sporadic  Operator. 


There  are  two  other  timing  constraints  provided  by  PSDL  that  haven’t  been 
mentioned  yet.  They  are  for  dealing  with  distributed  systems,  and  because  they  are  important, 
are  covered  here.  However,  these  are  not  used  in  the  current  enhancements  to  the  SDE  and 
therefore  will  not  be  mentioned  after  this  paragraph.  The  first  is  Latency  (LAT),  which  denotes 
the  maximum  delay  that  can  occur  between  a  producer  operator  writing  to  a  stream  and  a 
consumer  operator  reading  that  same  stream.  This  can  become  a  problem  when  dealing  with 
networks  and  therefore  must  be  accounted  for  in  such  cases.  The  second  constraint  for 
distributed  systems  is  the  Minimum  Output  Period  (MOP),  which  is  the  amount  of  time  an 
operator  must  wait  before  issuing  another  write  to  an  ouq)ut  stream.  Both  of  these  constraints 
are  due  to  the  possible  delays  introduced  by  network  traffic,  and  restrict  an  operator  from 
reading/writing  from/to  a  stream  before  the  appropriate  LAT/MOP  has  elapsed, 
b.  Data  Triggering  Semantic  Checking 

The  specific  constraints  that  must  hold  in  order  that  a  prototype  is  schedulable  are 
many  and  complex.  Because  of  this,  only  the  simpler  ones  that  are  directly  involved  in  changes 
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to  SDE  are  mentioned.  Also,  because  the  focus  of  this  thesis  is  concerned  with  making  SDE 
more  productive  by  adding  schedulability  checking,  the  theories  behind  schedulability  rules  will 
be  discussed  lightly  and  not  proved.  For  a  much  more  in-depth  look  at  the  fundamental  theory  of 
the  scheduling  of  distributed  hard  real-time  systems,  see  reference  [Ref.  11, 16]. 

After  gaining  some  familiarity  with  the  concept  of  periodic  and  sporadic 
operators,  several  relatively  simple,  but  important,  constraints  that  must  be  imposed  on  the 
producer  and  consumer  operator  connected  via  one  or  more  streams  that  need  to  be  adhered  to 
become  apparent;  constraints  that  can  be  checked  while  in  the  SDE. 

If  the  producer  of  a  stream  has  a  period  that  is  shorter  than  that  of  the  consumer 
of  the  same  stream,  there  is  a  strong  likelihood  that  a  problem  will  develop  whereby  the 
consumer  can  not  stay  caught  up.  For  that  reason,  the  rule  is  that  the  Consumer’s  PER  must  be 
less  than  or  equal  to  that  of  the  Producer  if  they  are  connected  by  a  dataflow  stream. 

Sporadic  operators  are  not  regularly  firing  operators.  They  fiire  based  on  the 
arrival  of  new  data.  However,  if  a  sporadic  operator  has  no  data  trigger,  it  will  be  defaulted  to  a 
periodic  operator  with  period  equal  to  MCP  to  meet  the  need  for  some  sort  of  conversion  for 
periodicity  and  thus  schedulability. 

The  next  constraint  involves  a  time-critical  producer  with  a  non  time-critical 
consumer  connected  by  a  dataflow  stream.  There  is  a  strong  likelihood  that  the  high  priority 
producer  will  overflow  the  dataflow  stream  because  the  consumer  can  fire  only  when  free  time 
is  available.  Having  the  producer  put  data  on  the  dataflow  stream  regularly  with  the  consumer 
using  the  data  when  time  is  available  simply  will  not  work. 

The  last  two  constraints  to  be  checked  by  the  SDE  involve  the  situation  where  a 
stream  is  produced  by  a  non  time-critical  operator  and  consumed  by  a  time-critical  operator.  If 
the  consumer  is  triggered  with  BY  ALL,  the  designer  should  be  warned  that  possible  overflow 
could  result  because  if  the  producer  gets  enough  time,  it  could  produce  new  data  for  the  stream 
before  the  next  execution  of  the  consumer  has  commenced.  Finally,  if  the  consumer  is  triggered 
with  BY  SOME,  the  designer  should  be  warned  that  possible  data  loss  could  result  because,  just 
as  before,  the  producer  could  get  enough  free  time  that  it  writes  to  the  stream  before  the 
consumer  reads  the  old  data;  the  difference  being  that  this  time  the  old  data  would  just  go  away. 

Table  4  below  shows  the  semantic  data  trigger  related  checking  that  is 
accomplished  by  the  SDE.  As  alluded  to  earlier,  cases  not  discussed  nor  shown  below  are  either 
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trivial  ones  that  call  for  no  conditional  checking  or  those  which  require  sporadic  operators  to  be 
converted.  As  SDE  does  not  do  any  converting  of  sporadic  operators  for  semantic  checking, 
these  can  not  be  checked.  Those  cases  can  be  found,  however,  in  reference  [Ref.  11]. 
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s 

By  Some 

Warning:  Possible  Data  Loss 

NTC 

s 

None 

Warning:  Sporadic  Consumer  Operator  will  have  MCP  as  default  period 

Table  4.  Semantic  Data  Triggering  Constraints  to  be  done  by  SDE. 

c.  Timing  Constraint  Semantic  Checking 

The  timing  constraints  attached  to  a  time-critical  operator  are  subject  to  multiple 
restrictions  to  ensure  the  possibility  that  the  prototype  is  schedulable.  As  already  mentioned, 
there  are  more  than  is  described  here;  cases  which  fall  in  either  the  trivial  or  too  hard  category. 
Below  is  the  first  of  several  restriction  that  must  hold. 

MET<FW<PER 
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If  the  MET  was  allowed  to  exceed  the  FW,  the  operator  could  use  more  CPU 
time  than  its  deadline  allows;  this  clearly  can  not  be  allowed.  The  second  inequality  must  hold 
for  a  single  CPU  schedule  because  if  the  operator  was  allowed  to  finish  after  the  period  was 
over,  it  would  delay  the  start  of  that  operator’s  next  activation. 

The  Maximum  Execution  Time  Theorem  [Ref.  11]  states  the  following  must  hold 
for  the  set  of  all  periodic  operators  in  order  that  the  prototype  be  schedulable  on  a  uniprocessor. 

MAX  (MET)  <  MIN(PER) 

This  in  no  way  guarantees  that  the  prototype  is  schedulable;  we  only  know  that  it 
isn’t  if  this  is  violated.  There  are  two  possibilities  here. 

In  the  case  where  the  same  operator  had  constraints  such  that  MET  >  PER,  it 
would  not  be  schedulable  even  with  a  multiprocessor;  that  case  is  covered  above. 

In  the  second  case,  where  the  MET  and  PER  belong  to  different  operators,  the 
constraint  becomes  apparent  when  you  think  about  the  fact  that  when  violated  and  dealing  with 
only  one  processor,  the  operator  with  the  smaller  PER  will  be  blocked  longer  than  the  span  of  its 
PER  while  the  operator  (remember  these  are  uninterruptable)  with  the  larger  MET  executes.  If 
the  second  operator  is  blocked  longer  than  its  PER,  it  can’t  possibly  make  the  deadline.  So  then 
it  makes  sense  that  the  smallest  PER  must  be  greater  than  the  largest  MET. 

The  first  question  that  comes  to  mind  is,  “How  many  processors  wiU  do  the 
job?”.  This  question  is  answered  for  periodic  operators  with  the  Load  Factor,  which  is  cited  in 
many  sources  dealing  with  scheduling.  It  shows  the  minimum  number  of  processors  that  will  be 
required  to  schedule  the  prototype. 


1^ £  (METx/PERx) 

Again,  this  does  not  guarantee  schedulability.  It  only  guarantees  that  without  the 
number  of  processors  specified,  the  prototype  is  not  schedulable.  Intuitively,  this  formula  states 
that  the  larger  the  MET  is  with  respect  to  its  PER,  the  more  utilization  is  required  of  the 
processor.  This  means,  as  they  get  closer  to  being  equal,  the  operator  gets  closer  to  needing  a 
processor  aU  to  itself. 

Static  scheduling  requires  having  advance  knowledge  of  the  process  behavior. 
This  means  all  operators  must  be  effectively  periodic  [Ref.  12],  and  further  means  sporadic 
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operators  must  be  converted  so  that  they  have  equivalent  periods.  The  process  of  attaining  the 
equivalent  period  is  somewhat  complex,  and  involves  heuristics.  The  outcome  is  never  greater 
than  min[(MRT  -  MET),  MCP],  and  so  this  can  be  used  as  an  upper  bound.  Using  this 
information  and  other  theorems  presented  in  reference  [Ref.  11],  the  following  constraint  is 
required  of  all  sporadic  operators. 

2  X  MET  £MRT,  met  <  MCP 

Presented  thus  far  are  the  constraints  that  are  imposed  on  otherwise  valid  time- 
critical  operators.  There  are  other  timing  constraints  that  are  somewhat  more  intuitive. 

First,  every  time  critical  operator  must  have  an  MET  so  that  the  scheduler  can 
know  how  much  time  must  be  allocated  to  the  operator  in  the  schedule.  Therfore,  if  is  an  error 
for  an  operator  to  have  a  PER,  FW,  MCP,  or  MRT  without  a  MET. 

Second,  a  time-critical  operator  must  be  periodic  exclusive-or  sporadic.  This 
means  it  must  be  one  or  the  other,  but  not  both.  Because  of  this,  mixing  constraints  from  both 
and  having  both  is  definitely  an  error. 

Table  5  below  shows  the  semantic  checking  that  can  be  accomplished  by  the 
SDE.  Again,  cases  not  shown  in  the  table  are  either  trivial,  calling  for  no  conditional  checking, 
or  require  sporadic  operators  to  be  converted.  As  SDE  does  not  currently  do  conversion  of 
sporadic  operators  for  semantic  checking,  these  can  not  be  checked.  They  can  be  found, 
however,  in  reference  [Ref.  11]. 
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Y  =  Yes,  is  specified  N  =  No,  is  not  specified 
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Table  5.  Semantic  Timing  Constrainst  to  be  done  by  SDE. 
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C.  MODIFICATIONS 

Modifications  to  the  SDE  are  based  on  the  additional  functionality  outlined  in  the  last 
section.  That  functionality  was  summari2ed  in  Tables  4  and  5. 

1.  Data  Triggering  Constraints 

When  looking  at  the  remarks  of  the  Table  4,  it  is  apparent  that  the  data  triggering 
constraints  can  be  further  simplified  into  five  major  points: 

1)  When  the  producer  and  consumer  operator  are  both  periodic  and  connected  by  a 
dataflow  stream,  the  PER  of  the  producer  must  greater  than  or  equal  to  that  of  the 
consumer, 

2)  When  the  producer  of  a  stream  is  time-critical  and  the  consumer  is  not,  if  the 
consumer  has  a  BY  ALL  trigger,  overflow  can  result, 

3)  When  the  producer  of  a  stream  is  time-critical  and  the  consumer  is  not,  if  the 
consumer  does  not  have  a  BY  SOME  trigger,  data  loss  can  result 

There  is  some  commonality  about  these  rules  that  will  be  exploited  in  order  to  minimize 
the  task  of  modifying  the  SDE.  First  each  rule  identifies  a  consumer  or  producer  (or  both)  of  a 
stream.  Therefore,  a  structure  will  be  needed  to  store  whether  an  operator  is  a  producer  or  a 
consumer.  It  will  also  need  to  keep  track  of  whether  the  consumer  operators  have  a  trigger  and 
what  type  it  is.  The  rules  also  depend  on  the  knowledge  of  whether  or  not  the  operator  is  time- 
critical.  This  means  a  set  of  time-critical  operators  must  be  created  so  they  can  be  kept  track  of 
separately.  Further,  those  time-critical  operators  must  be  broken  down  into  a  mutually  exclusive 
set  of  periodic  and  sporadic  operators.  And  one  more  piece  of  information  about  those  operators 
that  is  needed  is  the  value  of  its  PER.  The  astute  reader  will  note  that  sporadic  operators  do  not 
have  a  PER.  This  means  that  the  sporadic  operator  should  be  converted  so  that  it  will  have  an 
equivalent  PER. 

Timing  Constraints 

An  inspection  of  the  remarks  of  Table  5  will  also  bring  to  light  some  commonality  that 
can  be  summarized.  Those  rules  can  be  broken  down  into  six  major  points: 

1)  A  time-critical  operator  must  have  a  MET, 

2)  A  time-critical  operator  can  not  mix  periodic  and  sporadic  timing  constraints, 

3)  A  time-critical  operator  with  only  one  of  its  two  timing  constraints  (FW  and 
PER  for  Periodic  and  MRT  and  MCP  for  Sporadic)  will  have  the  unspecified 
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constraint  set  to  a  trivial,  default  value, 

4)  An  otherwise  valid  periodic  operator  must  follow  the  specification  of 
MET^W<PER  or  the  prototype  can  not  be  scheduled, 

5)  An  otherwise  valid  sporadic  operator  must  follow  the  specification  of 
2*MET<MRT  and  MCP  <  MCP  or  the  prototype  can  not  be  scheduled. 

Just  as  with  the  data  triggering  rules,  these  must  be  able  to  identify  whether  an  operator  is 
constrained.  In  addition,  they  must  be  able  to  determine  the  existence  and  value  of  any  FW, 

PER,  MRT,  and  MCP  constraints.  The  next  step  is  to  define  structures  to  hold  the  information 
deemed  required  above. 

2.  Abstract  Syntax  Rule 

Summarizing  the  requirements  of  both  the  data  triggering  rules  and  the  timing  constraint 
rules  three  structures  will  be  required.  The  name  of  each  structure  is  in  bold  parenthesis.  An 
edge  set  (edge_set)  is  needed  to  keep  track  of  all  edges.  It  will  store  the  edge’s  name,  producer 
operator,  consumer  operator,  and  latency  value.  The  latency  is  not  needed  for  these  rules,  but  it 
makes  sense  to  keep  it,  as  it  could  be  used  in  future  enhancements  to  the  SDE.  The  second 
structure  needed  to  support  these  rales  is  a  constrained  operator  set  (op_id_met_set).  It  will 
store  the  name  of  all  operators  that  have  a  MET  and  the  value  of  the  MET,  thereby  identifying 
constrained  operators.  Finally,  a  structure  will  be  needed  to  store  all  of  the  constrained  operators 
and  their  constraints  in  a  set  (id_constraint_set).  It  will  store  the  name  of  all  constrained 
operators,  their  time  constraints  (per  and  fw  for  periodic  operators,  and  mcp  and  mrt  for  sporadic 
operators),  and  type  of  trigger. 

The  last  two  structures,  which  will  be  referred  to  as  phyla  from  here  on,  look  as  though 
they  should  be  combined.  The  first  attempt  at  defining  additional  abstract  syntax  rules  did  in  fact 
have  these  two  together.  The  problem  is  that  the  MET  exists  in  a  separate  section  of  the 
derivation  tree  than  do  the  other  timing  constraints.  Therefore,  these  two  distinct  phyla  need  to 
exist  at  the  lower  levels  of  the  tree  anyway.  The  three  additional  phyla  required  are  displayed  in 
Figure  44  below.  The  phyla  not  terminating  here  are  further  defined  in  the  full  abstract  syntax 
rales  of  PSDL  in  Appendix  B  as  a  phylum  or  lexeme.  REAL  is  a  built  in  type. 
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list  op_id_met_set; 
op__i  d_me  t_s  e  t 

:  exported  OpIdMetSetNil ( ) 

1  exported  OpIdMetPair (op_id_inet  op_id_met_set ) ; 
op__id_inet 

:  exported  OpIdMetNull ( ) 

I  exported  OpIdMet {operator_id  met) ; 

met 

:  exported  MetNull { ) 

I  exported  MET (REAL); 

/* - */ 

list  id_cons train t__set; 
id_constraint_set 

:  exported  IdConstraintSetNil ( ) 

I  exported  IdConstraintPair ( id__constraint  id_constraint_set ) ; 
id__constraint 

:  exported  IdConstraintNull ( ) 

I  exported  IdConstraint (operator_id  time_constraints  trigger); 
time_constraints 

:  exported  OpConstraintsNull ( ) 

I  exported  Periodic (per  fw) 

I  exported  Sporadic (mcp  mrt) ; 
trigger 

:  exported  TriggerByNull ( ) 

I  exported  TriggerByAll ( ) 
i  exported  TriggerBySome ( ) ; 

per 

:  exported  PerNullO 
I  exported  Per (REAL); 
fw 

:  exported  FwNullO 
1  exported  FW(REAL); 

mcp 

:  exported  McpNull ( ) 

1  exported  MCP (REAL) ; 

mrt 

:  exported  MrtNull  ( ) 

!  exported  MRT  (REAL)  ; 

/* - */ 

list  edge_set; 
edge_set 

:  exported  EdgeSetNilO 
i  exported  EdgePair (edge  edge_set) ; 
edge 

:  exported  EdgeNullO 

I  exported  Edge (id  latency  producer  consumer); 
latency 

;  exported  LatencyNull ( ) 

I  exported  Latency (REAL) ; 
producer 

:  exported  ProducerNull ( ) 
i  exported  Producer (operator_id) ; 
consumer 

:  exported  ConsumerNull ( ) 

I  exported  Consumer (operator_id) ; 


Figure  44.  Additional  Abstract  Syntax  Rules  for  SDE. 


As  tree  representations  are  sometimes  more  familiar  and  easier  to  understand,  these  mles 
have  been  re-displayed  in  the  trees  of  Figure  45  below.  While  it  doesn’t  contain  as  much 
information  as  the  actual  specifications,  it  may  make  quickly  referencing  the  rules  easier. 


75 


id  constraint  set 


76 


3.  Attribute  Rules 

AU  of  the  timing  constraints  ended  up  being  represented  as  real  numbers  as  opposed  to 
the  normal  representation  of  integers  with  an  unit  (i.e.  90  milliseconds).  These  were  represented 
as  real  so  that  no  matter  what  number  is  given  in  the  design,  it  could  be  converted  to  a  default 
internal  representation  for  comparison  purposes.  This  means  that  when  the  auxiliary  functions 
were  defibned  (Appendix  E),  there  had  to  be  one  that  converts  the  timing  constraint 
representation  within  the  old  abstract  syntax  to  real  for  compliance  with  this  abstract  syntax. 

With  one  exception,  the  attribute  names  are  simply  the  same  as  the  newly  created 
phylum  with  the  prefix  syn  or  inh,  depending  on  whether  it  is  synthesized  or  inherited.  The 
exception  is  the  syn_vertex_id_met_set  of  type  op_id_met_set.  The  word  “vertex”  was 
substituted  in  for  “op”  because,  while  they  are  the  same  thing,  the  previously  defined  abstract 
grammar  used  the  term  vertex.  Therefore,  the  declared  attribute  name  was  changed. 

Earlier,  it  was  stated  that  the  MET  and  other  timing  constraints  were  established  in 
different  parts  of  the  derivation  tree.  Figure  46  is  a  partial  look  at  the  abstract  syntax  rules  for 
the  PSDL  SDE  in  tree  form.  On  the  tree  the  attributes  equations  required  for  the  semantic 
checking  outlined  above  are  shown  in  bold  type.  Note  where  the  MET  information  is  located  as 
opposed  to  where  the  timing  constraint  information  is  (typed  within  parenthesis  at  the  bottom  of 
the  figure).  The  MET  is  defined  under  a_vertex,  the  edge  constraints  under  an_edge,  and  the 
timing  constraints  under  a_constraint.  Therefore,  that  is  where  the  synthesized  attributes  had  to 
start.  While  the  synthesized  attributes  bubble  up  the  tree,  the  inherited  attributes  sink  down  the 
tree.  This  is  evident  when  looking  at  the  Figure  46.  The  vertex_id_met_set  bubbled  up  starting 
at  the  vert_list  phylum,  continuing  on  to  the  graph  phylum  and  then  on  to  the  operator_impl 
phylum  where  it  is  copied  to  the  inh_vertex_id_met_set  attribute  at  the  operator_impl  phylum. 
From  there,  it  begins  sinking  on  the  right  side  of  the  tree;  first  to  the  cc  phylum  and  then  to  the 
constraints  phylum  where  it  can  be  used  for  semantic  checking. 
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Figure  46.  Abstract  Syntax  with  Attributes  Equations. 


While  it  seems  a  little  backwards  to  show  the  attribute  equations  before  the  attribute 
declarations,  it  was  done  to  not  only  demonstrate  what  the  attribute  equations  are  but  more 
importantly  show  graphically  where  they  must  exist. 

Recall  that  all  synthesized  attributes  are  built  at  the  lower  levels  and  then  passed  up  the 
tree.  Also,  realize  that  in  lists,  every  set  of  attributes,  which  are  defined  by  the  equations  in  the 
figure,  will  exist  once  for  each  occurrence  in  that  list.  PsdLcomponents,  for  example,  is 
composed  of  a  component  and  another  psdl_components  (psdl_components$2).  The  equations 
under  the  phylum  component  (shown  in  the  figure)  will  synthesize  all  of  its  attributes  for  the 
mentioned  component  (shown  in  the  figure)  and  again  for  every  other  component  in 
psdl_components$2,  recursively.  Therefore,  at  the  component  phylum,  the  set  of  id_constraints, 
for  example,  will  be  only  the  ones  within  that  component  (its  children).  At  the  prototype 
phylum,  however,  there  will  be  one  set  and  it  will  contain  all  of  the  id_constraints  within  the 
prototype. 

The  edge_set  didn’t  need  to  be  collected  into  one  single  set  for  all  of  them,  so  it  was  not 
synthesized  up  to  the  prototype  phylum.  It  stopped  at  the  operator_impl  phylum,  which  then  had 
all  of  the  edges  for  its  child  operators.  In  fact,  the  semantic  checking  requires  aU  of  the  attributes 
to  be  collected  at  the  operator_impl  phylum.  After  all,  the  best  place  to  check  and  subsequently 
notify  the  designer  of  a  problem  is  at  the  component  where  the  problem  exists.  The  reason  that 
the  other  two  attributes  (id_met_set  and  id_constraint_set)  are  synthesized  aU  the  way  up  to  the 
prototype  phylum  is  so  that  the  number  of  processors  required  could  be  determined.  It  was 
decided  that  the  Load  Factor  equation  would  be  used  to  determine  how  many  processors  are 
required  by  the  design.  This,  of  course,  necessitates  having  all  of  the  MET’s  and  PER’s  in  one 
place.  What  this  also  calls  for,  is  being  able  to  convert  the  sporadic  operators.  Because  there  was 
not  enough  time  to  do  that  function,  the  number  of  processors  required  is  only  based  on  periodic 
operators.  The  display  on  the  editor  must  state  this  disclaimer. 

Figure  47  below  shows  both  the  attribute  declarations  and  equations  for  the  synthesized 
and  inherited  attributes.  The  local  attributes  and  equations  for  semantic  checking  will  be 
discussed  next  along  with  the  required  additions  to  the  attribute  rules. 
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prototype/  psdl_coinponents,  component  {syn  op_id_jTiet_set  syn_vertex_id_jnet_set ; } ; 

prototype/  psdl^componentS/  component  {syn  id_constraint_set  syn_id_constraint_set ; } ; 
operator_impl /  graph/  vertex_list  {syn  op_id_met_set  syn_vertex_id_met_set ; } ; 

operator_impl/  graph/  €dge_list  {syn  €dge_set  syn_edge_set;); 

operator_impl/  CC/  constraints  {syn  id_constraint_set  syn_id_constraint_s€t ; } ; 

cc/  constraints,  a_constraint  {inh  op_id_met_set  inh_vertex_id_met_set ; 

prototype 
:  Prot 

{$$ . syn_v€rtex_id_met_set  =  psdl_components.syn_vertex_id_met_set; 

$$.syn_id_constraint_set  =  psdl_components.syn_id_constraint_set; } ; 
psdl_components 
:  PsdlNil 

{ $$ . syn_v€rtex_i d_met_set  =  OpIdMetSetNi 1 ; 

$$ . syn_id_constraint_set  =  IdConstraintSetNil ? } 
i  PsdlPair 

{ $  $ . syn_vert  ex_i d_met_set  =  Op_I d_M€ t_Set_Un ion ( component . syn_vert ex_i d_met_set , 

psdl_components$2 . syn_vertex_id_met_set) ; 

$$ . syn_id_constraint_set  =  Id_Constra int_Set_Union (component .syn_id_constraint_set, 

psdl_components$2 .syn_id_constraint_set) ; ) ; 

component 

:  NoComponent 

{$$.syn_vertex_id_met_set  =  OpIdMetSetNi 1 ? 

$$.syn_id_constraint_set  =  IdConstraintSetNil;} 

I  Op 

{ $  $ . syn_V€rt  ex_i d_met_set  =  operat  or_impl . syn_vert ex_i d_met_set ; 

$$ . syn_id_constraint_set  =  operator_impl . syn_id_constraint_S€t ; } 
t  Data 

{ $  $ . syn_vertex_i d_met_set  =  OpIdMetSetNi 1 ; 

$$  .syn_id_constraint_set  =  IdConstraintSetNil;},- 
operat or_impl 

:  OpImplNull/  AdaOpImpl 

{$$.syn_vertex_id_met_set  =  OpIdMetSetNi 1 ; 

$$ . syn_edge_set  =  EdgeSetNi 1 ; 

$$.syn_id_constraint_set  =  IdConstraintSetNil;} 

I  Operat or Impl 

{ $  $ . syn_vert ex_i d_jnet_set  =  graph . syn_vert  ex_i d_met_se t ; 

$$ . syn_edge_set  =  graph . syn_edge_s€t ; 

$$.syn_id_constraint_set  =  cc .syn_id_constraint_set ; 
cc . inh_vertex_id_met_set  =  $$ . syn_vertex_id_met_set ; } ; 

graph 

:  GraphNull 

{$$.syn_v€rtex„id_met_set  =  OpIdMetSetNi 1 ; 

$$ • syn_edge_set  -  EdgeSetNi 1 ; } 

[  Graph 

{$$.syn_vertex_id_met_set  =  vertex_list  .syn_vert€x_id_met_set; 

$$ .  syn_edge_set  =  edge_l  ist .  syn_edge_set ; } ; 

vertex_list 

:  VertexListNull 

{ $  $ .  syn_vertex_i  d_m€t_set  ==  OpIdMetSetNi  1 ; } 

1  VertexListPair 

{$$.syn_vertex_id_met_set  =  Op_Id_M€t_Set_Union(G€t_Id_Met_Set  (a_vertex) , 

vertex_l ist$2 - syn_vertex_id_met_set) ; } ; 

edge_list 

:  EdgeListNil 

{ $  $ .  syn_edge_set  =  EdgeSetNi  1  ,* } 

I  EdgeListPair 

{$$.syn_edge_set  =  Edge_Set_Union (Get_Edge_Set (an^edge) , 

edge_l ist$2 . syn_edge_set } ; } ; 
cc 

;  CcNull 

{$$ . syn_id_constraint_set  =  IdConstraintSetNil;} 
i  Cc 

{$$ .syn_id_constraint_set  =  constraints. syn_id_constraint_set ; 
constraints . inh_vertex_id_met_set  =  $$ . inh_vertex_id_met_set ; } ; 
constraints 

:  Constraint sNull 

{$$. syn_id_cons train t_set  =  IdConstraintSetNil;} 
t  ConstraintsPair 

{$$.syn_id_constraint_set  =  (Valid_T„Constraint  (a_constraint}  !l  All_OR_Soitie_Trigger  (a_constraint)  } 
?  ld_Constraint„Set_Union(Get_Id_Constraint_Set {a_constraint/  $$ . inh_vertex_id_met_set ) , 

constraints$2 . syn_id_constraint_set ) 

:  constraints$2 .syn_id_constraint_set ; 
a_constraint .  inh_vertex_id_met_set  =  $$ .  inh_vertex_id_met_set  ; 
constraints$2 . inh_vertex_id_met_set  =  $$ . inh_vertex_id_met_set ; } ; 


Figure  47.  Synthesized  and  Inherited  Attribute  Equations  of  Attribute  Rules. 


Because  the  amount  of  code  for  implementing  the  local  attributes,  equations  and 
auxiliary  functions  for  the  semantic  checking  required  is  large,  only  part  of  the  changes  to  the 
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SDE  will  be  shown  here.  Appendix  C  contains  a  full  listing  of  the  PSDL  SDE  Attribute  Rules, 
including  those  added  by  this  tiiesis.  The  additions  to  the  operator_impl  phylum  are  significant 
enough  to  show  some  of  the  work  done.  It  is  represented  in  Figure  48. 


operator_iinpl 

:  OpImplNull,  AdaOpImplO 
I  Operatorlmpl 

{local  BOOL  producerop_period_le_cons\imerop_error; 
producerop_period_le_consutnerop_error  = 

{Is_ProducerOp_P€riod_LE_ConsumerOp  {$$  .syn_edge_set , 

$$  .syn_id_constraint._set) )  ; 
local  STR  producerop_period_le_consuinerop_insg; 

producerop_period_le_consuinerop_msg  =  (producerop_period_le_consuinerop_error) 
?  '\n* 

#  !For  any  edge,  the  Producer’s  PeriodVn" 

#  ■ —  must  exceed  that  of  the  Consumer-* 


local  BOOL  sporadic_consumerop_wo_trigger_error; 
sporadic_consumerop_wo_trigger_error  s 

( Is_Sporadic_ConsumerOp_wo_Trigger ($  $ . syn_edge_set , 

$$.syn_id_constraint_set) ) 

local  STR  sporadic_consuinerop_wo„trigger_msg; 
sporadic_consumerop_wo_trigger_insg  = 

( sporadi  c_consujmerop_wo_t  r  igger_error ) 

?  -Xn* 

M  * —  5 For  any  edge,  if  the  Consumer  is\n* 

#  ■ —  Sporadic,  it  must  have  a  Trigger.* 


local  BOOL  constr_producerop_and_unconstr_consumerop_w_trigger_error ; 
constr_producerop_and_unconstr_consumerop_w_trigger_error  = 

( I s^Cons t  r_Pr oduce rOp_And_Un const r_Con s umerOp_W_Tr i gg er ( $  $  - sy n_edg e_se t , 

S$ . syn_vertex_id_met_set , 
$$.^n_id_constraint_setj  )  ; 

local  STR  constr_producerop_and_unconstr_consumerop_w_trigger_msg; 
constr_producerop_and_unconstr_consumerop_w_trigger_msg  = 
(constrjproducerop_and_unconstr_consumerop_w_trigger_error) 

?  'Xn* 

#  • —  !For  any  edge,  if  the  Producer  is  constrained, Xn* 

#  ‘ —  an  unconstrained  Consumer  can  not  have  a  Trigger.* 


local  BOOL  unconstr_producerop_and_constr_consumerop__w_byall_error; 
unconstr_producerop_and_constr_consumerop_w_byal l_error  = 

(Is_Unconstr_ProducerOp_And_Constr_ConsumerOp_w_ByAll {$$ . syn_edge_set , 

$$ - syn_vertex_id_met_set , 
$$.syn_id_constraint_set) ) ; 

local  STR  unconstr_producerop_and_constr_consumerop_w_byall_msg; 
unconst r_producerop_and_constr_consumerop_w_byal l_msg  = 

( uncon  St  r_producerop_and_c  on  s  t  r_c  on  s  umerop_w_bya  1  l_e  rror ) 

?  -Xn* 

#  * —  !For  any  edge,  if  the  Producer  is  unconstrained, Xn* 

#  • —  a  constrained  consumer  triggered  By^AllXn* 

#  * —  can  result  in  Overflow.* 


local  BOOL  unc  on  s t  r_producerop_and_con  s tr_con  sumer op_w_by s  ome_er r or ; 
unconstr_producerop_and_constr^consumerop_w_bysome_error  = 

(Is_Unconstr_ProducerOp_And_Const r_ConsumerOp_W_BySome ( $$ . syn_edge_set , 

$$  -  syn_vertex_id_met_set , 
$$.syn_id_constraint_set) ) ; 

local  STR  unconstrjproducerop_and_constr_consumerop_w_bysome_msg; 
unconst r_producerop_and_c  on  s  t r_con  sumerop_w_by some_msg  = 

( unconst  r_producerop_and_const  r_consumerop_w_by  some_error ) 

7  'Xn* 

#  * —  !For  any  edge,  if  the  Producer  is  unconstrained, Xn* 

#  * —  a  constrained  consumer  triggered  By_SomeXn* 

it  “ —  can  result  in  Data  loss.*  ~ 


local  BOOL  hds_error; 
has_error  = 

(producerop_period_le_consum€rop_error  I  | 

sporadic_consumerop_wo_trigger_error  I  [ 

constr_producerop_and_unconstr_consumerop__w_trigger_error  I  [ 
uncons tr_producerop_and_constr_consumerop_w_by a ll_error  1  I 
unconstr_producerop_and_constr_consumerop_w_bysome_error) ; 
local  STR  error_header; 
error_header  =  {has_error) 

?  -Xn* 

- - - - - - Xn* 

#•--  SCHEDULING  NOTICE:* 

local  STR  error_trailer; 
error_trailer  s  (has_error) 


Figure  48.  Local  Attributes  and  Equations  for  operatorjmpi  Phylum. 
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The  code  is  fairly  straight  forward  and  separated  into  sections  divided  by  dashed  lines. 
Which  section  implements  which  semantic  check  can  be  quickly  determined  by  looking  at  one 
of  the  two  possible  string  values  that  are  assigned.  Each  correspond  with  the  remarks  of  Table’s 
4  &  5,  and  are  mentioned  again  at  the  beginning  of  this  section.  The  last  section  in  Figure  48 
merely  sets  up  the  header  and  trailer  if  any  of  the  previous  constraint  checking  variables  are  trae 
(indicating  violation). 

Many  functions  are  referenced  in  the  last  two  figures.  The  previously  existing  auxiliary 
functions  are  listed  in  Appendix  D,  while  the  auxiliary  functions  written  in  support  of  this  thesis 
are  in  Appendix  E.  Recall  that  function  names,  for  the  conventions  here,  are  mixed  upper  and 
lower  case  with  underscoring;  i.e.  This_Is_A_Function_Name. 

To  ensure  that  the  functions  are  understood,  one  will  be  covered  here.  The  first  section  of 
code  in  the  last  figure  checks  to  ensure  that  for  any  edge,  if  the  consumer  operator’s  period  is 
greater  than  or  equal  to  the  producer’s,  an  appropriate  error  message  is  displayed.  The  boolean 
variable  is  set  to  true,  setting  the  displayed  string  to  the  error  message  vice  null,  if  the  function 
Is_ProducerOP_Period_LE_ConsumerOP  returns  true.  This  is  a  boolean  function  that  takes  two 
arguments  (operator_impl.syn_edge_set,  operator_impl.syn_id_constraint_set),  and  is  displayed 
in  Figure  49. 


BOOL  exported 


Is_ProducerOp_Period_LE_ConsumerOp  (edgG_set  es, 

id_constraint_set  cs)  { 


with(es)  ( 

EdgeSetNil:  false, 

EdgePair(hd,  tl)  ; 
with(hd)  ( 

EdgeNull:  Is_Produc€rOp__Period_LE_ConsumerOp(tl ,  cs) , 

Edge(*,  *,  p,  c) : 
with{p}  ( 

ProducerNull :  Is_Produc€rOp_Period_LE_ConsumerOp (t 1 ,  cs) , 

Producer (p_opid) : 
with(c)  ( 

ConsumerNul 1 :  Is_ProducerOp_Period„LE_ConsumerOp{tl ,  cs) , 

Consumer (c_opid) : 

{Get_Period (p_opid,  cs)  ==  PerNull  I  I 
Get_Period (c_opid,  cs)  ==  PerNull  ) 

?  Is_ProducerOp_Period_LE_ConsumerOp(tl,  cs) 

:  {Get_Period (p_opid,  cs)  <=  Get_Period{c_opid,  cs) ) 

?  true 

:  Is_ProducerOp_Period_LE_GonsumerOp (tl ,  cs) 

) 

) 

) 


) 

); 


Figure  49.  Auxiliary  Function. 


As  mentioned  in  chapter  three,  if  not  familiar  with  recursion,  this  would  be  a  good  time 
to  review.  Most  of  the  functions  take  on  this  same  format.  The  keyword  “with”  is  used  like  a 
case  statement  that  covers  all  of  the  operators  of  the  with’d  phylum,  and  most  of  them 
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recursively  search  sets  such  as  the  edge_set  or  id_constraint_set  When  looking  at  a  function 
such  as  this,  ensure  that  the  phylum  description  (abstract  syntax)  of  the  attributes  passed  in  are 
close  by.  This  makes  reading  the  function  much  easier. 

The  displayed  function  first  looks  at  the  edge_set.  If  it  is  nil  (empty),  the  answer  is  false 
(there  is  no  edge  in  error).  If  the  set  is  not  empty,  the  first  edge  or  the  head  (an_edge)  is  pulled 
off  and  its  producer  and  consumer  operatorjd’s  are  determined.  Then,  the  function  Get_Period 
is  used  with  those  operator_id’s  to  return  the  period’s  of  each  and  are  compared  to  see  if  either 
is  null.  If  that  is  the  case,  or  if  a  nuUary  value  is  hit  prior  to  this  point,  the  function  is  simply 
called  again  with  the  same  id_constraint_set  and  the  rest  of,  or  tail  of  the  edge_set.  If  there  are 
two  valid  periods  assigned,  they  are  checked  to  ensure  that  the  producer’s  exceeds  the 
consumers.  If  not,  true  is  returned  (thus  an  error).  If  so,  once  again,  the  function  is  called  with 
the  tail  of  the  edge_list.  This  will  continue  until  an  error  is  reached  or  until  the  end  of  the  list  is 
reached  when  EdgeSetNil  is  found  and  false  is  returned. 

4.  Unparsing  Rules 

The  unparsing  rules  only  called  for  a  few  additions.  Recall,  theses  are  the  specifications 
that  control  what  is  displayed  by  the  editor.  The  only  items  that  must  be  displayed  and  weren’t 
already  are  the  additional  local  string  attributes  that  were  defined  in  the  attribute  rules  to  either 
display  the  error  that  exists  or  a  null  value  when  no  error  exists. 

Figure  50  shows  the  unparsing  for  the  operator_impl  phylum  because  that  is  the  one 
displayed  with  its  attributes  in  the  last  figure.  Notice  that  all  of  the  local  string  attributes 
declared  and  built  in  the  attribute  rules  are  displayed  under  the  operator  named  Operatorimpl. 
The  various  views  represent  different  unparsing  schemes  so  that  what  is  seen  by  the  user 
depends  on  which  view  is  being  displayed  and  multiple  views  can  be  displayed  at  once  if 
desired.  Also  notice  that  comments  are  placed  after  each  placeholder  to  help  identify  which 
phylum  is  represented  by  that  placeholder. 
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operator^impl 


:  OpImplNull 
[SDE^VIEW, 

I  AdaOpImpl 
[SDE_VIEW, 
: 


SHOW_GRAPH_TEXT_VIEW  @  :  ^^rKOperator  implementation>" ] 

SHOW_GRAPH_TEXT_VI EW ,  BASEVI EW ,  S PEC_ONLy_VI EW , I MPL_ONLY_V I EW 
=  "%nIMPLEMENTATION  ADA  "  @  "%n%t'‘  "%b%nEND''] 


1 


•  %n I M  PLEMENTATI ON “ 


Operatorlmpl 

[SDE_VIEW,  SHOW_GRAPH_TEXT_VIEW 
@  /*graph*/ 

error_header 

pr oduc er op_per i o d_l e_c on sume r op_ms g 
sporad ic_c on sumerop_wo_t r i gg€r_msg 

constr_producerop_and_unconstr_consumerop_w_trigger_insg 

uncons  tr_pr oducerop_and_c on St r_c  on  sumerop_w__bya 1 l_msg 

uncons tr_produ cerop_and_con St r_c  on sumerop_w_by soine_msg 


error_trailer 

^  /*declarations*/ 

@  /*cc*/ 

"%nEND"] 

[BASEVIEW,  SPEC_ONLY_VIEW,  IMPL_ONLY_VIEW  • %n IMPLEMENTATION “ 

©  /*graph*/ 

^  /*declarations*/ 

©  /*cc* 

nnEND"] 


Figure  50.  Unparsing  Rules  for  operator_inipl  Phylum. 


5.  Transformation  Rules 

The  transformation  rules  of  the  SDE  were  not  modified  by  this  thesis  and  therefore  are 
not  discussed  here.  Appendix  F  has  the  transformation  rules  for  the  PSDL  SDE. 

6.  Concrete  Rules 

The  concreted  rules  were  not  modified  either  and  therefore  are  not  discussed  but  are 
fully  listed  in  Appendix  G. 


D.  TESTING 

In  the  beginning  of  this  chapter,  a  prototype  was  developed  to  give  an  example  on  how  to 
use  the  SDE.  Lets  see  how  the  new  editor  reacts  with  the  same  prototype.  Particularly  of 
interest  is  how  the  editor  reacts  when  entering  the  timing  constraints.  For  that  reason,  Figure  36 
is  repeated  below. 
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OPEEt^R  Evaluate JTemp 
SPECIPICAnON 
INPUT 

Tei^eirature  :  FLOAT 
OUTPUT 

Cool_Signal  :  FLOAT, 

Heat_Signal  ;  FLOAT 
MAXTHUX  EEECUnOK  TIKE  200  MS 

END 

<Qperator  i]i^lementation> 

OPERATOR  Heater 
SPECIFICATION 
INPUT 

Heat_SignaI  :  FLOAT 

END 

< operator  ijRpleinentation> 

OPERATOR  Sensor 
SPECIFICATION 
OUTPUT 

Tes^erature  :  FL02CT 
MAXIMUM  EXECUTION  TIME  175  MS 

END 

< operator  iaplementation> 


sPEciFicanoN 

END 

IMPLEMENTATION 

GRAPH 

“  see  graph  viever  for  details 

Dm  STREAM 
Cool_Signal  :  FLOAT, 

Heat^Signal  :  FLOAT, 

Teinperature  :  FLOAT 
CONTROL  CONSTRAHniS 
OPERATOR  Cooler 

OPERATOR  Evaluate_TeBp 
PERIOD  210  MS  ^ 

FINISH  205  MS"^ 

OPERATOR  Heater  | 

OPERATOR  Senso  ^ 

PERIOD  190  MS  ^  _ — ^ 

FINISH  IBS  MS*^ 


New  Control  Constraints 


Figure  36.  Complete  PSDL  Program  with  Control  Constraints  (Repeated). 

The  same  constraints  will  be  inserted  into  the  prototype  just  created.  Notice  in  Figure  51 
that  when  inputting  the  PER  for  operator  Evaluate_Temp,  a  message  comes  up  and  states  that 
if  left  unspecified,  FW  will  default  to  PER.  It  will  do  this  for  PER,  FW,  MRT,  and  MCP. 


CflPS-Cndc  File  Edit  Vieu  Toole  Options  Structure  Tex( 


OPERATOR  Cooler 


OPERATOR  Evaluatc_Tenp 


•>-  SCHEDULING  NOTICE: 

—  !lf  left  -unspecified, 

—  Finish_Within  will  default  to  Period. 

PERIOD 

[ requirements  trace] 

OPERATOR  Heater 
OPERATOR  Sensor 


Context:  tine  Tine_Expression 


Figure  51.  SDE  with  Default  Message. 
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Going  further,  the  PER  and  FW  is  input  for  the  Evaluate_Temp  operator.  So  far,  so  good. 
The  editor  does  not  complain,  so  the  Sensor  operator  is  given  the  PER  constraint  defined 
earlier.  As  soon  as  the  return  key  is  hit,  as  Figure  52  indicates,  the  editor  gives  the  familiar 
default  message,  but  there  is  another  message.  The  new  scheduling  notice  states  that  the  PER 
of  the  producer  of  a  stream  must  exceed  that  of  the  consumer.  This  constraint,  under  the  old 
editor,  would  have  gone  un-noticed  until  translated  and  scheduled,  thereby  eating  up  a  great 
deal  of  time.  Not  to  mention  the  fact  that  the  designer  may  no  longer  have  this  information 
fresh  in  his  or  her  memory. 


mmn 

mynmniQi 

II 

£ND 

DJPIJEMEiriaTION 


GB2FH 

—  aee  grsph  vievcr  for  details  — 


—  SCHEDDLIHG  NOTICE: 

—  !Por  any  edge,  the  Producer's  Period 

—  Kust  exceed  that  of  the  Consumer. 


STREAM 

Cool_Signal  :  FLOAT, 
Heat_5ignal  :  FLOAT, 
Teller ature  :  FLOAT 
CONTROL  CONSTRAINTS 
OPERATOR  Cooler 

OPERATOR  Evaluate^Teag) 
PERIOD  210  MS 
FINISH  20S  MS 

OPERATOR  Heater 

OPERATOR  Sensor 


—  SCHEDULING  NOTICE: 

--  !lf  left  unspecified, 

—  Finishjrithin  vill  default  to  Period. 


PgPTPP  190  gs 


Context:  c^tional^period  optional.triceer 


Figure  52.  SDE  with  PER  Constraint  Error. 


But  wait,  there  is  another  message.  This  prototype,  because  of  the  way  the  constraints 
were  assigned  will  not  run  on  a  uniprocessor.  The  message  at  the  top  of  the  editor,  based  on  the 
Load  Factor  discussed  earlier,  states  that  the  prototype  will  require  at  least  2  processors  to 
schedule.  Apparently  each  operator  was  constrained  in  such  a  way  that  they  both  will  require  a 
processor  of  their  own.  Figure  53  shows  the  message  at  the  top  of  the  editor.  This  illustrates  a 
very  good  point  made  earlier.  As  discussed  in  the  beginning  of  this  thesis,  scheduling  hard  real¬ 
time  systems  is  very  difficult.  If  this  system  were  real  and  had  to  run  on  a  single  CPU,  we 
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would  have  already  blown  it  The  designer  needs  quick  feedback  as  to  whether  the  design  will 
work  or  not  If  this  isn’t  provided,  a  great  deal  of  time  could  be  spent  on  a  design  that  is 
impossible  to  implement,  before  the  designer  realizes  it  can’t  work.  The  other  semantic  checks 
display  error  messages  such  as  the  ones  shown  thus  far.  All  of  the  checks  outlined  in  Table  4  & 
5  earlier  have  been  implemented  and  their  message  reads  very  much  like  the  remarks  of  the 
tables.  It  is  up  to  the  reader  to  experiment  with  the  SDE  to  see  all  of  them  for  one  self. 


CflPS-Cnds  File  Edit  Vieu  Tools  Options  Structure  Tex!: 


—  Q&BNINGS,  ERRORS  AND  ALERTS; 

—  ! Prototype  vill  not  schedule  for  less  than 

—  2  processors.  (Based  on  Periodic  Operators  only) 


I  OPERATOR  Cooler 
SPECIFICATION 
INFOT 

Cool^Signal  ;  FLOAT 

END 

< operator  uq)leaentation> 

OPERATOR  EvaluateJTemp 
SPECIFICATION 
INPUT 

Temperature  :  FLOAT 
OOTTDT 

CooI_Si9nal  :  FLOATi 
Heat_Signal  :  FLOAT 
MAXIMUM  EXECUTION  TIME  200  MS 

END 

<  operator  implenentation> 

OPERATOR  Heater 
SPECIFICATION 
INPUT 


Figure  53.  SDE  with  number  processors  required  message. 
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V.  FUTURE  RESEARCH  AND  DEVELOPMENT 

One  of  the  biggest  obstacles  to  new  tools  is  acceptance  by  new,  potential  users.  The 
learning  curve  plays  a  major  part  of  this.  If  the  tool  is  too  difficult  to  use,  no  matter  how  good  it 
is,  most  will  reject  it.  For  this  reason,  more  and  more  time  is  being  spent  on  developing  good 
user  interfaces  as  well  as  developing  good  tools. 

Learning  how  to  use  the  SDE  not  a  trivial  task  and  many  are  intimidated  by  it  at  first. 

The  graphical  editor,  however,  comes  somewhat  natural  to  most  users.  The  CAPS  tool-set 
would  be  embraced  more  strongly  if  the  input  functionality  was  moved  to  the  graphical  editor. 
Users  would  not  have  to  learn  to  use  a  new  editor  nor  would  they  have  to  learn  a  new  language 
(PSDL).  Information  could  be  taken  from  and  presented  to  the  designer  in  a  more  intuitive 
fashion. 

The  information  that  is  currently  input  via  the  graphical  editor  is  propagated  to  the  SDE. 
Research  should  to  be  done  to  determine  how  much  more  of  this  propagation  can  be  achieved 
going  in  both  directions  between  the  derivation  tree  of  the  SDE  and  the  graphical  editor.  The 
goal  should  be  such  that  not  only  wiU  the  Graphical  Editor  account  for  all  (or  as  much  as 
possible)  of  the  input,  but  well  formed  messages  should  be  displayed  back  to  the  designer  while 
still  in  the  Graphical  Editor.  A  separate  window,  perhaps  utilizing  TAE+,  could  be  designed  for 
displaying  both  the  feedback  messages  that  currently  exist  within  the  SDE  and  those  of  future 
implementations. 

The  display  of  how  many  processors  are  required  to  schedule  the  prototype  can  be 
particularly  useful  to  the  designer.  Because  the  SDE  can  not  convert  the  sporadic  operators  to 
have  an  equivalent  period,  it  is  not  as  accurate  as  could  be.  Some  research  should  be  devoted  to 
whether  or  not  this  can  be  effectively  done  within  the  editor. 

Additional  checking  that  could  be  accomplished  with  the  attributes  already  gathered 
include  testing  for  constrained  operators  that  have  unconstrained  children.  Also,  using  the  edges  • 
and  operator  MET’s,  each  thread  under  a  parent  operator  could  be  checked  to  ensure  its  total 
required  execution  time  does  not  exceed  that  of  the  parent 

Other  checking  that  can  be  accomplished  is  the  verification  of  streams  that  are  built 
during  decomposition.  For  example  if  a  parent  operator  has  an  external  stream  coming  in  and 
two  regular  streams  coming  out,  when  it  is  decomposed,  the  graph  editor  shows  those 
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connections  at  the  bottom  as  a  reminder.  If  the  designer  doesn’t  include  them  or  puts  additional 
incoming  or  outgoing  streams  in,  there  are  no  warnings  upon  returning  to  the  SDE.  This 
inconsistency  should  not  be  allowed  and  can  be  tracked  with  the  current  edge  attributes  captured. 

Many  of  the  templates  displayed  in  the  help  pane  (menu  window)  should  not  be  there. 
For  example,  the  designer  could  pick  psdl_implementation  out  of  the  help  pane  to  replace  the 
placeholder  <operator  implementation>.  This  does  not  work  well  and  really  shouldn’t  be  an 
option  to  the  designer.  If  the  operator  is  to  be  implemented  with  PSDL,  that  should  be  done 
within  the  graphical  editor.  The  same  holds  for  input  and  output  stream.  It  is  more  confusing  to 
the  new  users  of  the  SDE  to  have  those  displayed.  Research  should  be  done  on  what  parts  of  the 
display  can  be  removed  for  a  more  clear  implementation  of  the  editor. 
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APPENDIX  A  -  PSDL  Grammar 


APPENDIX  A  -  PSDL  Grammar 
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